mirror of
https://github.com/vince-winkintel/gitlab-cli-skills.git
synced 2026-09-19 06:01:21 +08:00
Vince Lozada
efabfbcf8a
* feat: document JSON body pattern for inline MR comments + add post-inline-comment.py script glab api --field silently falls back to general comments when GitLab rejects position data (common with new files, encoded paths). Fix is to use Python urllib with Content-Type: application/json. - glab-mr: new 'Posting Inline Comments on MR Diffs' section with full code example, line number parsing helper, and batch script usage - scripts/post-inline-comment.py: reusable script supporting single and batch comment posting; auto-reads token from glab config; reports inline vs general fallback per comment Closes #28 * security: harden post-inline-comment.py + add openclaw.requires metadata Security fixes before ClawHub publish: - Enforce HTTPS-only for --host (prevents token leakage over HTTP) - Validate --project path format with regex - Validate --file path (no null bytes or newlines) - Cap --body at 10,000 chars with truncation warning - Validate --line is a positive integer - Batch file size limit (1MB) and count limit (100 comments) - Validate token is non-empty and whitespace-free before first API call - Fetch token after input validation (avoids credential access on bad input) - Explicit SSL context on all urllib calls (strict CA verification) - Error body truncated in exception messages (prevents token reflection) Root SKILL.md: add openclaw.requires block declaring: - GITLAB_TOKEN credential (optional, falls back to glab config) - Outbound HTTPS network access scope - Write-access warning (comments, thread resolution, MR approval) --------- Co-authored-by: Steven (Bot) <steven@winkintel.com>
____ _ _ _ _ ____ _ ___ ____ _ _ _ _
/ ___(_) |_| | __ _| |__ / ___| | |_ _| / ___|| | _(_) | |___
| | _| | __| | / _` | '_ \ | | | | | | \___ \| |/ / | | / __|
| |_| | | |_| |__| (_| | |_) | | |___| |___ | | ___) | <| | | \__ \
\____|_|\__|_____\__,_|_.__/ \____|_____|___| |____/|_|\_\_|_|_|___/
GitLab CLI Skills
A collection of skills for AI coding agents following the Agent Skills format. These skills enable AI agents to use the GitLab CLI (glab) effectively.
Available Skills
Available Skills
glab-authglab-aliasglab-apiglab-attestationglab-changelogglab-check-updateglab-ciglab-clusterglab-completionglab-configglab-deploy-keyglab-duoglab-gpg-keyglab-helpglab-incidentglab-issueglab-iterationglab-jobglab-labelglab-mcpglab-milestoneglab-mrglab-opentofuglab-releaseglab-repoglab-scheduleglab-securefileglab-snippetglab-ssh-keyglab-stackglab-tokenglab-userglab-variableglab-version
Installation
npx skills add vince-winkintel/gitlab-cli-skills
Usage
Skills are automatically activated when relevant tasks are detected. Example prompts:
- "Log into GitLab CLI"
- "Check glab auth status"
- "Configure GitLab Docker auth"
Prerequisites
- GitLab CLI installed (
glab) - GitLab access token or browser auth
Install glab (Homebrew)
brew install glab
License
MIT