Security audit
GitLab
Security checks for vulnerabilities and agentic risk
Overview
This is a coherent GitLab MCP connector that requires OAuth account connection and contains no bundled skill instructions or local executable behavior.
Before installing, review the GitLab OAuth consent screen and connect an account with only the project access you want the agent to use. The local package itself is minimal, but the remote GitLab MCP service may provide tools that read or modify GitLab resources permitted by your account.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.