gitlab
Manage GitLab Workflows with glab
GitLab work often requires switching between terminal, browser, issues, merge requests, and pipelines. This skill gives AI assistants a concise glab workflow for repository checks, merge request handling, issue work, and CI inspection.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "gitlab" from https://skillstore.io/skills/eteissonniere-gitlab.md and its manifest at https://skillstore.io/api/skills/eteissonniere-gitlab/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "gitlab". Review merge request 42 and tell me what needs attention.
Expected outcome:
The response summarizes the merge request title, author, branches, comments, open threads, and recommended next actions.
Using "gitlab". Check why the latest pipeline failed.
Expected outcome:
The response reports the pipeline state, highlights failed jobs, points to relevant traces, and asks before rerunning anything.
Using "gitlab". Create an issue for the release blocker.
Expected outcome:
The response drafts a concise title and description, then asks for confirmation before creating the GitLab issue.
Security Audit
High RiskThe static backtick detections are false positives because SKILL.md contains Markdown command references, not executable Ruby or shell code. A high-confidence semantic risk remains: several GitLab write operations are documented without an explicit confirmation requirement. No evidence found for prompt injection attempts.
Confirmed security concerns (1)
Risk Factors
⚙️ External commands (32)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/eteissonniere-gitlab/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/eteissonniere-gitlab?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/eteissonniere-gitlab?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/eteissonniere-gitlab/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/eteissonniere-gitlab.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
ETeissonniere. (2026). gitlab security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/eteissonniere-gitlab/audits/8BibTeX citation
@techreport{eteissonniere-eteissonniere-gitlab-2026,
author = {ETeissonniere},
title = {gitlab security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/eteissonniere-gitlab/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gitlab security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "ETeissonniere"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/eteissonniere-gitlab/audits/8"
identifiers:
- type: other
value: "skillstore:eteissonniere-gitlab:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Review Merge Request Context
Summarize an existing merge request, include comments when needed, and identify safe next actions.
Triage Assigned Issues
List assigned GitLab issues, inspect details, and prepare a clear response or next-step plan.
Inspect CI Pipeline Health
Check pipeline status, list recent runs, and review traces before deciding whether to rerun jobs.
Try These Prompts
Use this skill to confirm whether this repository is on GitLab, verify glab authentication, and show my open merge requests.
Use this skill to view merge request <id> with comments, summarize blockers, and suggest next actions without merging.
Use this skill to list issues assigned to me, inspect the highest priority issue, and draft a comment for my review.
Use this skill to check CI status, review recent pipeline failures, and propose a safe rerun plan before triggering anything.
Best Practices
- Confirm the repository remote and glab authentication before any operation.
- Ask for explicit approval before commands that merge, close, approve, run, or retry.
- Provide merge request IDs, issue IDs, and expected outcomes in the request.
Avoid
- Running write operations without naming the target and receiving approval.
- Assuming a repository uses GitLab before checking the git remote.
- Pasting secrets into merge request or issue descriptions.
Frequently Asked Questions
Does this skill require glab?
Can it work with self-hosted GitLab?
Can it create or merge merge requests?
Does it store GitLab credentials?
Can it inspect pipeline logs?
Is it only for Claude?
Developer Details
Author
ETeissonniereLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
30c73eac2afe762f6aa9c4553158769369d47351
Maintenance freshness
7/18/2026
Usage
5 downloads · 243 views
File structure
📄 SKILL.md