Is d1gl3/gitlab-api safe?
Yes. d1gl3/gitlab-api is safe to install. Oathe's behavioral security audit gave the gitlab-api skill by d1gl3 a trust score of 92/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/d1gl3/gitlab-api
Is d1gl3/gitlab-api safe to install?
This GitLab API skill provides legitimate functionality for interacting with GitLab repositories via their REST API. The skill contains well-structured shell scripts with proper input validation and follows standard GitLab API patterns. No malicious behavior, prompt injection attempts, or unauthorized data access was detected.
What security issues were found in d1gl3/gitlab-api?
Category Scores
Findings (4)
INFO Executable shell script present -15 ▶
The skill contains a shell script (gitlab_api.sh) that provides command-line interface for GitLab API operations. The script is well-structured with proper input validation and follows GitLab API patterns.
LOW External URLs referenced -5 ▶
The documentation references external GitLab URLs for API documentation and token generation. These are legitimate references to official GitLab resources.
LOW Reads configuration files -10 ▶
The script reads GitLab token and instance URL from user configuration files. This is documented, expected behavior for a GitLab API client.
LOW Potential for misuse via legitimate functionality -15 ▶
While the skill itself is benign, it could theoretically be misused to upload sensitive data to GitLab repositories. However, this risk is inherent to any legitimate GitLab API client and requires user token permissions.
Should I install d1gl3/gitlab-api?
Oathe's verdict for d1gl3/gitlab-api is SAFE with a trust score of 92/100. Recommendation: Install.