OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
This skill automates addressing GitLab Merge Request comments using the glab CLI. The primary security concern is indirect prompt injection, where an external contributor could place malicious instructions in an MR comment to trick the agent into performing unauthorized code changes or executing harmful tests.
Detected behaviors
No alerts
No issues