gitlab-cli-skills

github.com/clawhub.ai/gitlab-cli-skills
Verdict: Proceed with caution
0 critical6 high2 medium
C
SCORE 55 / 100
$skillox install gitlab-cli-skillsSoon
Sign in to followFollowing emails you when a re-scan drops the grade. Opt-out is per-creator on /account/billing.

Why grade C?

score · 55 / 100

The current grade reflects 6 high-severity findings (3+ HIGHs → C).

0 CRIT6 HIGH2 MED0 LOW
To reach a higher grade
  • B
    Reach Btarget score 75

    Resolve 4 of 6 HIGH (cap is 2).

  • A
    Reach Atarget score 95

    Resolve all 6 HIGH.

Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.

Latest scan findings

Scan crawl-el1fk3lvb0jevlsd1oraouc7 · Thu, 28 May 2026 15:34:35 GMT · 41ms

high
Sensitive filesystem path referenced
The skill references a path (`~\/\.docker\/config\.json`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
rule: filesystem-overreachline: 766CWE-552
▾
764**Docker authentication fails:**
765- Re-run: `glab auth configure-docker`
766- Check Docker config: `cat ~/.docker/config.json`← sensitive path — credential-exfiltration vector
767- Verify helper is set: `"credHelpers": { "registry.gitlab.com": "glab-cli" }`
768
high
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
rule: filesystem-overreachline: 4391CWE-552
▾
4389**Always verify you are uploading a PUBLIC key, not a private key.**
4390
4391- ✅ Public keys: `~/.ssh/id_rsa.pub`, `~/.ssh/id_ed25519.pub` (`.pub` extension)← sensitive path — credential-exfiltration vector
4392- ❌ Private keys: `~/.ssh/id_rsa`, `~/.ssh/id_ed25519` (no extension — NEVER upload these)
4393
high
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
rule: filesystem-overreachline: 4392CWE-552
▾
4390
4391- ✅ Public keys: `~/.ssh/id_rsa.pub`, `~/.ssh/id_ed25519.pub` (`.pub` extension)
4392- ❌ Private keys: `~/.ssh/id_rsa`, `~/.ssh/id_ed25519` (no extension — NEVER upload these)← sensitive path — credential-exfiltration vector
4393
4394Uploading a private key to GitLab would expose your credentials. Double-check the filename before running `glab ssh-key add`.
high
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
rule: filesystem-overreachline: 4398CWE-552
▾
4396```bash
4397# ✅ Safe — public key
4398glab ssh-key add ~/.ssh/id_ed25519.pub --title "My Laptop"← sensitive path — credential-exfiltration vector
4399
4400# ❌ NEVER do this — private key
high
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
rule: filesystem-overreachline: 4401CWE-552
▾
4399
4400# ❌ NEVER do this — private key
4401# glab ssh-key add ~/.ssh/id_ed25519 --title "My Laptop"← sensitive path — credential-exfiltration vector
4402```
4403
high
Sensitive filesystem path referenced
The skill references a path (`~\/\.ssh\/`) that contains credentials or system secrets. Reading this from an unsandboxed skill is a credential-exfiltration vector.
rule: filesystem-overreachline: 4407CWE-552
▾
4405```bash
4406# Should start with 'ssh-rsa', 'ssh-ed25519', 'ecdsa-sha2-*', etc.
4407head -c 20 ~/.ssh/id_ed25519.pub← sensitive path — credential-exfiltration vector
4408```
4409
med
Arbitrary subprocess execution detected
The skill spawns subprocesses. Without a capability manifest declaring this, the skill could execute arbitrary commands.
rule: subprocess-executionline: 2486CWE-78
▾
2484
2485# Get token from glab config
2486token = subprocess.run(← spawns a subprocess outside declared capabilities
2487 ["glab", "config", "get", "token", "--host", "gitlab.com"],
2488 capture_output=True, text=True
med
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule: no-manifest
▾
View latest scan →
skillox.io/c/gitlab-cli-skills