← Back to Skills Marketplace
jorgermp

Gitlab Manager

by jorgermp · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
3287
Downloads
5
Stars
12
Active Installs
1
Versions
Install in OpenClaw
/install gitlab-manager
Description
Manage GitLab repositories, merge requests, and issues via API. Use for tasks like creating repos, reviewing code in MRs, or tracking issues.
README (SKILL.md)

GitLab Manager

This skill allows interaction with GitLab.com via the API.

Prerequisites

  • GITLAB_TOKEN: A Personal Access Token with api scope must be set in the environment.

Usage

Use the provided Node.js script to interact with GitLab.

Script Location

scripts/gitlab_api.js

Commands

1. Create Repository

Create a new project in GitLab.

./scripts/gitlab_api.js create_repo "\x3Cname>" "\x3Cdescription>" "\x3Cvisibility>"
# Visibility: private (default), public, internal

2. List Merge Requests

List MRs for a specific project.

./scripts/gitlab_api.js list_mrs "\x3Cproject_path>" "[state]"
# Project path: e.g., "jorgermp/my-repo" (will be URL encoded automatically)
# State: opened (default), closed, merged, all

3. Comment on Merge Request

Add a comment (note) to a specific MR. Useful for code review.

./scripts/gitlab_api.js comment_mr "\x3Cproject_path>" \x3Cmr_iid> "\x3Ccomment_body>"

4. Create Issue

Open a new issue.

./scripts/gitlab_api.js create_issue "\x3Cproject_path>" "\x3Ctitle>" "\x3Cdescription>"

Examples

Create a private repo:

GITLAB_TOKEN=... ./scripts/gitlab_api.js create_repo "new-tool" "A cool new tool" "private"

Review an MR:

# First list to find ID
GITLAB_TOKEN=... ./scripts/gitlab_api.js list_mrs "jorgermp/my-tool" "opened"
# Then comment
GITLAB_TOKEN=... ./scripts/gitlab_api.js comment_mr "jorgermp/my-tool" 1 "Great work, but check indentation."
Usage Guidance
Before installing: (1) Ask the publisher/registry to update the metadata to declare GITLAB_TOKEN as a required credential so the platform can treat it as a secret. (2) Inspect the included script (it's short) and confirm it only talks to https://gitlab.com/api/v4 (no hidden endpoints). (3) If you proceed, create a dedicated GitLab Personal Access Token with the minimum scopes and expiration needed (avoid broad scopes), and store it in the platform's secret store rather than passing it on the command line. (4) Consider running the script locally or in an isolated environment first. (5) If you cannot verify the origin/trustworthiness of the skill (source is unknown), prefer not to grant a PAT to it.
Capability Analysis
Type: OpenClaw Skill Name: gitlab-manager Version: 1.0.0 The OpenClaw skill bundle provides a Node.js script to manage GitLab resources (repositories, merge requests, issues) via its API. The `SKILL.md` clearly outlines the purpose and usage, requiring a `GITLAB_TOKEN` for authentication. The `scripts/gitlab_api.js` script correctly implements these functionalities, making API calls exclusively to `https://gitlab.com/api/v4` using the provided token. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The `fs` module is imported but not used, which is not a security concern.
Capability Assessment
Purpose & Capability
The name/description, SKILL.md, and the included script consistently implement GitLab API operations (create repo, list/comment MRs, create issues) calling https://gitlab.com/api/v4. However the registry metadata claims no required environment variables or primary credential while both SKILL.md and the script require GITLAB_TOKEN. That metadata omission is disproportionate and reduces transparency about needed credentials.
Instruction Scope
SKILL.md limits runtime actions to running the provided Node script to talk to the GitLab API. The instructions do not ask the agent to read unrelated files or send data to endpoints other than GitLab. The runtime behavior is scoped to repository/MR/issue operations.
Install Mechanism
There is no install spec (instruction-only) and the package only includes a short Node script. Nothing is downloaded or extracted from external/untrusted URLs.
Credentials
Requiring a GITLAB_TOKEN (PAT with 'api' scope) is appropriate for the declared functionality, but the registry metadata does not list this required env var or a primary credential. That mismatch is problematic because the platform may not prompt you to provide a token or treat it as a secret. Also, giving a PAT to an installed skill grants it direct API access to your projects — you should ensure the token is least-privilege, short-lived, and issued only if you trust the skill.
Persistence & Privilege
always is false and there are no config paths or system-wide changes requested. The skill can be invoked autonomously (platform default) — normal for skills, but note that autonomous invocation plus a supplied PAT allows the skill to act on your GitLab resources without further prompts.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install gitlab-manager
  3. After installation, invoke the skill by name or use /gitlab-manager
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of gitlab-manager. - Manage GitLab repositories, merge requests, and issues via the API. - Supports creating repositories, listing and commenting on merge requests, and creating issues using a Node.js script. - Requires GITLAB_TOKEN with appropriate API permissions. - Designed for simple command-line integration and automation of common GitLab tasks.
Metadata
Slug gitlab-manager
Version 1.0.0
License
All-time Installs 12
Active Installs 12
Total Versions 1
Frequently Asked Questions

What is Gitlab Manager?

Manage GitLab repositories, merge requests, and issues via API. Use for tasks like creating repos, reviewing code in MRs, or tracking issues. It is an AI Agent Skill for Claude Code / OpenClaw, with 3287 downloads so far.

How do I install Gitlab Manager?

Run "/install gitlab-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Gitlab Manager free?

Yes, Gitlab Manager is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Gitlab Manager support?

Gitlab Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Gitlab Manager?

It is built and maintained by jorgermp (@jorgermp); the current version is v1.0.0.

💬 Comments