helpers/skills/gitlab-pipeline-debugger/SKILL.md
Debug and monitor GitLab CI/CD pipelines for merge requests. Check pipeline status, view job logs, and troubleshoot CI failures. Use this when the user needs to investigate GitLab CI pipeline issues, check job statuses, or view specific job logs.
npx skillsauth add opendatahub-io/ai-helpers gitlab-pipeline-debuggerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This skill enables Claude to investigate GitLab CI pipeline failures by:
glab CLI installed and authenticated (glab auth status to verify)If glab is not installed or authenticated, provide instructions for setting it up:
glab auth loginWhen the user asks to check CI status, debug pipeline failures, or view job logs, use the glab CLI commands below.
All commands auto-detect the GitLab project from the git remote in the current working directory.
To target a different project, add -R <owner/group/project> to any command.
When the user provides a full GitLab URL, parse it to extract the project path and the pipeline or job ID,
then use -R to target that project. Always use the project from the URL, ignoring the local git remote.
Before constructing any command from a URL, validate the extracted values:
Project paths must only contain letters, digits, hyphens, underscores, dots, and forward slashes.
Pipeline and job IDs must be purely numeric.
Job names must only contain letters, digits, hyphens, underscores, dots, colons, slashes, and spaces. If any value fails validation, reject it and ask the user to provide a corrected URL or ID.
Pipeline URL format: https://gitlab.com/<group>/<project>/-/pipelines/<pipeline-id>
-R <group>/<project> and -p <pipeline-id>https://gitlab.com/my-org/my-project/-/pipelines/123456
becomes glab ci get -p 123456 -d -R my-org/my-projectJob URL format: https://gitlab.com/<group>/<project>/-/jobs/<job-id>
-R <group>/<project> and <job-id>https://gitlab.com/my-org/my-project/-/jobs/789012
becomes glab ci trace 789012 -R my-org/my-projectCheck Current Pipeline Status
glab ci get -d to get the latest pipeline for the current branch with job detailsCheck Specific Branch
-b flag to check the pipeline for a different branch:
glab ci get -b <branch-name> -dCheck Specific Pipeline by ID
-p flag to inspect a pipeline directly by its ID:
glab ci get -p <pipeline-id> -dView Job Logs
glab ci trace <job-id>glab ci trace <job-name> -p <pipeline-id>glab ci trace <job-name>glab ci trace <job-name> -b <branch-name>Find Merge Request for a Branch
glab mr list -s <branch-name>Troubleshoot CI Failures
# Check CI pipeline status for the current branch
glab ci get -d
# Debug a failed pipeline by viewing the failed job's logs
glab ci trace 789012 -R my-org/my-project
glab is not found, instruct the user to install itglab auth status reports unauthenticated, instruct the user to run glab auth login-R <owner/group/project> or running from within
the correct git repositorytools
Use this skill to filter a pre-fetched set of Hacker News stories down to those that report supply-chain security threats relevant to software developers — including malicious packages on npm or PyPI, compromised developer tooling, and attacks targeting source code repositories or CI/CD infrastructure. Reads stories from stories.json in the workspace, performs semantic analysis (fetching HN threads when the title alone is ambiguous), and writes the stories worth alerting on to findings.json.
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.