Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/knuckles-team/gitlab-api/gitlab-pipelinesnpx skills add Knuckles-Team/gitlab-api --skill gitlab-pipelinesgit clone --depth 1 https://github.com/Knuckles-Team/gitlab-apiWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00130 | $0.01186 |
| Opus 5 | $0.00065 | $0.00593 |
| Sonnet 5 | $0.00026 | $0.00237 |
| Haiku 4.5 | $0.00013 | $0.00119 |
Grade A, and why
gitlab-pipelines scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 102 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitLab Pipelines
Domain-typed review of GitLab CI/CD Pipelines — pipeline results at project, group, or instance scope, the jobs within a pipeline, and per-job logs. Also triggers a pipeline on a ref.
When to use
- Review pipeline results for a project / ref (is
maingreen?). - Review CI results across a group / organization (enumerate projects, then their pipelines).
- Fetch a single pipeline by
pipeline_id, list its jobs, and read a job log. - Trigger (
run) a new pipeline on a branch or tag.
When NOT to use
- Gating one MR's merge on its pipeline →
gitlab-merge-request-review(it reads the MR's pipeline/jobs/logs directly). - Issues, epics, milestones →
gitlab-issues. - Branch/commit/tag/project reads →
gitlab-repositories.
Prerequisites & environment
Connect via the mcp-client skill against the gitlab-api MCP server.
| Variable | Required | Notes |
|---|---|---|
GITLAB_URL |
✅ | GitLab instance base URL |
GITLAB_TOKEN |
✅ | Access token with api scope (needed to run) |
GITLAB_SSL_VERIFY |
optional | TLS verification toggle |
Full env/tag matrix: the mcp-client reference agent-tools/mcp-client/references/gitlab-api.md.
MCP_TOOL_MODE (condensed|verbose|both) selects the condensed vs. one-to-one verbose tools.
Tools & actions
| Condensed tool | Actions |
|---|---|
gitlab_groups |
get_projects (enumerate a group's projects) |
gitlab_pipelines |
get, run |
gitlab_jobs |
get_pipeline_jobs, get_project_jobs, get_log, retry, cancel |
Key parameters
- Scope — project:
gitlab_pipelines getwithproject_id. group/org:gitlab_groups get_projects(group_id) thengitlab_pipelines getper project. instance: iterate the projects you care about. gitlab_pipelines get:project_id(required);pipeline_idfor a single pipeline; filtersref,status,order_by,sort,per_page.gitlab_jobs get_pipeline_jobs:project_id+pipeline_id— the jobs of one pipeline.gitlab_jobs get_log:project_id+job_id— the job trace/log.gitlab_pipelines run:project_id+ref; optionalvariablesobject.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 102 lines · 130 tokens per session scan A a299f4e216aa
gitlab-pipelines is a skill published in the GitHub repository Knuckles-Team/gitlab-api (10 stars, last pushed 4d ago), licensed MIT. It adds 130 tokens to every session and 1,186 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
servicenow-studio-gitlab-app
Wire a ServiceNow scoped app (App Engine Studio / Fluent) to a GitLab repository and drive its promotion two ways — Path A: native Studio source control (servicenowsourcecontrol → importrepository / applyremotesourcecontrolchanges, handing off to servicenowcicd for publish/install), or Path B: GitLab-CI-driven…
observability
Observe Backend.AI logs, metrics, and traces during local development via the Grafana MCP (Loki logs, Prometheus metrics, Tempo traces, Pyroscope profiles). Use after restarting a service to verify behavior instead of tailing console output.
fastapi-guard
Production-ready security middleware for FastAPI. Use when adding IP filtering, rate limiting, per-route security decorators, route-resolution strict mode, global behavior rules, passive/log-only mode, or Guard Agent SaaS telemetry to a FastAPI app. Covers SecurityMiddleware setup, SecurityConfig tuning, and the…
weather
Get current weather and forecasts.
swissdevjobs
Search nine job boards across eight countries — the salary-transparent devitjobs family, jobs.ch and jobup.ch (all Swiss industries), and MyCareersFuture (Singapore IT) — and help the user apply. Handles the native apply form, direct-email postings, and third-party ATS postings (driven with a browser MCP). Trigger…
gdal-api
Use when programming against GDAL/OGR in C, C++, Python, or .NET for raster/vector I/O, coordinate transformation, or custom geospatial algorithms. GDAL API: low-level programming interface for reading/writing 70+ geospatial formats.