ClawHub

GitLab

v1.0.0

Avoid common GitLab CI/CD mistakes — rules gotchas, silent failures, and YAML merge traps.

⭐ 5· 1.8k·16 current·16 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (GitLab CI/CD gotchas) match the SKILL.md content. The skill does not request unrelated binaries, env vars, or config paths — everything present is explanatory guidance about GitLab pipelines.
✓
Instruction Scope
SKILL.md contains static best-practice notes (rules, artifacts, dind, triggers). It does not instruct the agent to read local files, access system credentials, or transmit data to external endpoints. Mentions of CI variables are contextual and not instructions to exfiltrate them.
✓
Install Mechanism
No install spec and no code files are present. As an instruction-only skill it does not write to disk or fetch remote code during install.
✓
Credentials
The skill declares no required environment variables or credentials. There are no disproportionate or unexplained requests for secrets or unrelated service keys.
✓
Persistence & Privilege
always is false and model invocation is not disabled (normal). The skill does not request permanent presence or modify other skills or system-wide settings.
Assessment
This skill is a read-only set of GitLab CI/CD tips and appears internally consistent and low-risk: it doesn't ask for credentials, install binaries, or run code. If you need stronger guarantees, prefer official GitLab docs or sources you trust; check the skill author and changelog before installing in environments with strict compliance requirements. If you plan to let an autonomous agent act on pipelines, ensure the agent's permissions and credentials are limited — the skill itself does not request any secrets, but agents can be granted them elsewhere.

Like a lobster shell, security has layers — review code before you run it.

latestvk9798c9jq7a1eg7f4k3my804a180xfpf

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🦊 Clawdis
OSLinux · macOS · Windows

Comments