Vince Lozada 732ab95906 security: address HIGH/MEDIUM findings from skills.sh audit (#35)
* security: address HIGH/MEDIUM findings from skills.sh audit

- Remove eval from mr-review-workflow.sh; add command allowlist
- Replace direct config file parsing with glab auth token in add-inline-comment.sh
- Add external content boundary markers to create-mr-from-issue.sh and ci-debug.sh
- Add private key upload warning to glab-ssh-key/SKILL.md
- Add prompt injection warnings to glab-api, glab-ci, glab-job SKILL.md files
- Add SECURITY.md with full security policy and guidance

Fixes #34

* chore: exclude SECURITY.md from zip export

---------

Co-authored-by: Steven (Bot) <steven@winkintel.com>
2026-03-04 19:41:38 -06:00
2026-01-30 14:43:52 -06:00

   ____ _ _   _          _        ____ _     ___   ____  _    _ _ _     
  / ___(_) |_| |    __ _| |__    / ___| |   |_ _| / ___|| | _(_) | |___ 
 | |  _| | __| |   / _` | '_ \  | |   | |    | |  \___ \| |/ / | | / __|
 | |_| | | |_| |__| (_| | |_) | | |___| |___ | |   ___) |   <| | | \__ \
  \____|_|\__|_____\__,_|_.__/   \____|_____|___| |____/|_|\_\_|_|_|___/
                                                                        

GitLab CLI Skills

A collection of skills for AI coding agents following the Agent Skills format. These skills enable AI agents to use the GitLab CLI (glab) effectively.

Available Skills

Available Skills

Installation

OpenClaw / Agent Skills

npx skills add vince-winkintel/gitlab-cli-skills

Claude.ai (Organization Skills)

Claude.ai requires a zip containing exactly one SKILL.md. Download the pre-built claude-skill.zip from the latest release and upload it in your organization's Settings → Custom Skills.

The zip contains a single merged SKILL.md combining all 37+ sub-skills into one comprehensive glab reference.

Build it yourself:

bash scripts/build-claude-skill.sh
# Output: ./claude-skill.zip

Usage

Skills are automatically activated when relevant tasks are detected. Example prompts:

  • "Log into GitLab CLI"
  • "Check glab auth status"
  • "Configure GitLab Docker auth"

Prerequisites

  • GitLab CLI installed (glab)
  • GitLab access token or browser auth

Install glab (Homebrew)

brew install glab

License

MIT

S
Description
Comprehensive GitLab CLI (glab) command reference and workflows for all GitLab operations via terminal. Use when user mentions GitLab CLI, glab commands,…
Readme MIT 614 KiB
Languages
Python 70.3%
Shell 29.7%