scan

Run glsec to scan this project's GitLab CI/CD configuration for security issues

Skill by glsec

IndexedApache-2.0★ 23

Chalk Labs

Need help deploying scan?

Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.

Book a call

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/glsec-scan

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Run glsec to scan this project's GitLab CI/CD configuration for security issues

Use cases: devops, security

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md and code. Checked Oct 25, 2026.

Tools: No tools found
Secrets: None asked for
Install scripts: None found

Network hosts it talks to 1

codeload.github.com · found in install command

Files it touches

~/.claude/skills/scan

What's inside

Skill name: scan
Description: Run glsec to scan this project's GitLab CI/CD configuration for security issues
License: Apache-2.0
Instructions: 21 lines in SKILL.md · view on GitHub

Files (1)

SKILL.md

SKILL.md (first lines)

Scan the current project's GitLab CI/CD configuration for security issues and report the findings.

Run glsec recursively over the project so every `.gitlab-ci.yml` (including nested ones) is checked:

```sh
glsec --recursive .
```

If that reports no CI config files were found, the project may use a non-default
filename — fall back to scanning an explicit path the user names, e.g.
`glsec path/to/pipeline.yml`.

Then, for each finding, explain:

- the rule ID and severity (`error` / `warn`),
- what the risk is, and
- how to remediate it.

`glsec explain <RULE-ID>` gives the full rationale and a safe-alternative example for any rule.

From glsec/glsec, Apache-2.0.

Signals

Stars: 23
Forks: 6
Open issues: 16
Last commit (this folder): Jun 3, 2026 (5 months ago)
Last release: Oct 24, 2026 (7 days ago)

From GitHub (fetched Oct 24, 2026).

Details

License: Apache-2.0
Repository: github.com/glsec/glsec
Website: github.com/glsec/glsec
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: GitHub github-graphql

Done for you

Rather not set it up yourself?

Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.

See how we build AI agents →Read the case studies

Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.

launches shipped: 50+; launches shipped
media placements: 500+; media placements
founders on every account: 2; founders on every account

Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block

Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.

Get scan running in your business

Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.

Need help deploying scan?

Call Get help

Cite this page

scan skill. Agent Mart. https://agentmart.dev/skills/glsec-scan (last updated 2026-10-24)