Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/knuckles-team/gitlab-api/gitlab-merge-request-createnpx skills add Knuckles-Team/gitlab-api --skill gitlab-merge-request-creategit clone --depth 1 https://github.com/Knuckles-Team/gitlab-apiWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00111 | $0.00941 |
| Opus 5 | $0.00056 | $0.00470 |
| Sonnet 5 | $0.00022 | $0.00188 |
| Haiku 4.5 | $0.00011 | $0.00094 |
Grade A, and why
gitlab-merge-request-create scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 78 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitLab Merge Request Create
Domain-typed creation of a GitLab merge request against a project via the gitlab-api MCP
server. This skill opens the MR; reviewing/approving/merging it is gitlab-merge-request-review.
When to use
- Open an MR from a
source_branchinto atarget_branchon a project. - Set title/description, assignees, reviewers, labels, and merge options
(
remove_source_branch,squash) at creation time.
When NOT to use
- Reviewing, approving, auto-merging, or merging an existing MR →
gitlab-merge-request-review. - Creating the source branch or committing files first →
gitlab-repositories. - Filing an issue →
gitlab-issues.
Prerequisites & environment
Connect via the mcp-client skill against the gitlab-api MCP server.
| Variable | Required | Notes |
|---|---|---|
GITLAB_URL |
✅ | GitLab instance base URL |
GITLAB_TOKEN |
✅ | Access token with api scope (write) |
GITLAB_SSL_VERIFY |
optional | TLS verification toggle |
Full env/tag matrix: the mcp-client reference agent-tools/mcp-client/references/gitlab-api.md.
MCP_TOOL_MODE (condensed|verbose|both) selects the condensed surface (below).
Tools & actions
Prefer the condensed tool; it takes action + a params_json JSON string.
| Condensed tool | Actions |
|---|---|
gitlab_merge_requests |
create |
Key parameters
project_id— required (numeric id orgroup/projectpath).data— object of field→value:source_branch,target_branch,title(all required), plus optionaldescription,assignee_ids(list),reviewer_ids(list),labels,milestone_id,remove_source_branch(bool),squash(bool),target_project_id(for cross-fork MRs).
Recipes (params_json)
Open a merge request:
{"project_id":"platform/agent-utilities","data":{"source_branch":"feat/fleet-enrichment","target_branch":"main","title":"Fleet enrichment: gitlab ontology + skills","description":"Adds ontology + specialist skills.","remove_source_branch":true}}
Open an MR with reviewers and assignees:
{"project_id":"platform/agent-utilities","data":{"source_branch":"fix/runner-link","target_branch":"main","title":"Fix runner link","reviewer_ids":[12,34],"assignee_ids":[12],"labels":"bug","squash":true}}
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 78 lines · 111 tokens per session scan A 3933d3091ab9
gitlab-merge-request-create is a skill published in the GitHub repository Knuckles-Team/gitlab-api (10 stars, last pushed 4d ago), licensed MIT. It adds 111 tokens to every session and 941 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
weather
Get current weather and forecasts.
create-mcp-tool
Create a new MCP tool end-to-end: sub-package, input/output structs, handler, ActionSpec metadata, markdown formatter, tests, catalog projection, and documentation. Use when adding a new GitLab API endpoint as an MCP tool.
go-safe-move-refactor
Safely move Go source files between packages with zero compilation downtime. Handles package declarations, import updates, symbol exports, type renames, test migration, and forwarding stubs. Validates compilation after every atomic step.
go-source-documentation
Add idiomatic, godoc-compliant documentation to Go source and test files. Use when user asks to document Go files, add doc comments, improve Go documentation, or mentions /document-go. Covers file headers, package comments, types, functions, interfaces, constants, variables, tests (with detailed explanations)…
increase-test-coverage
Increase Go test coverage to 90%+ using a Research → Plan → Implement pipeline. Analyzes coverage gaps, generates table-driven tests with httptest mocks, and validates results with go test -coverprofile. Designed for Go MCP server projects using the official go-sdk and gitlab.com/gitlab-org/api/client-go/v2.
modularize-go-package
Modularize a monolithic Go package into domain-specific sub-packages. Extracts shared utilities, moves domain files, updates imports, renames types, creates registration functions, and validates compilation+tests at every step. Designed for large-scale refactoring of 50-100+ file packages.