gitlab-sync Claude Code Mod: Install & Security Check

Name: gitlab-sync
Author: StalicJi

What is gitlab-sync?

gitlab-sync is a Claude Code mod by StalicJi that statusline 時間那一行上面（由 statusline 腳本讀檔印出）一行顯示目前分支跟遠端差幾個 commit，以及還開著的張數（GitLab 的 Task、Issue 分開計數，GitHub 只有 Issue）；GitLab 與 GitHub 上自己開的、指派給自己的 issue／MR（PR），以及要自己審查的. It is listed under Cost & usage and has no public popularity data yet.

Type	Claude code mod
Author	StalicJi
Repository	StalicJi/my-mods
Popularity	no public popularity data yet
Category	Cost & usage
Security	High risk (48/100)
Rank	#4,708 of 5,272 Claude Code mods; #923 in Cost & usage
License	MIT
Last commit	2026-10-17
Hooks	4 events
Sees	only the events it hooks
Draws on	nothing

Is gitlab-sync safe to install?

gitlab-sync scores 48/100 on the MCPMods security check: High risk. Things to review: sends data over the network; starts processes outside the sandbox; writes files or config; reads environment variables. It passed 3 of 8 checks.

Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.

Check	Result
Sends data over the network	Review
Starts processes outside the sandbox	Review
Writes files or config	Review
Reads environment variables	Review
Only sees the events it hooks	Pass
Doesn't drive Claude	Pass
Validator reported problems	Note
Has an open-source license	Pass

API calls in its code

Call	What it means
`$.clock.after`
`$.clock.every`
`$.clock.now`
`$.command.register`
`$.env.get`	reads env vars
`$.fs.stat`	reads files
`$.fs.write`	writes files
`$.http.fetch`	network requests
`$.process.run`	runs processes
`$.session.cwd`
`$.session.id`
`$.state.get`
`$.state.set`
`$.store.get`	keeps its own state
`$.store.set`	keeps its own state
`$.ui.status`	draws interface
`$.ui.toast`	draws interface

How do I install gitlab-sync?

Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
```
claude --version
```
Read its footprint. This lists every event it hooks and every API call it makes, without running it.
```
git clone https://github.com/StalicJi/my-mods
claude plugin validate ./my-mods/gitlab-sync
```

Install it. Run this in your terminal, then /reload-plugins in an open session.

claude plugin marketplace add StalicJi/my-mods && claude plugin install gitlab-sync@my-mods

Or ask Claude to set it up

Paste this into Claude Code and it installs gitlab-sync for you:

Install the "gitlab-sync" Claude Code mod from https://github.com/StalicJi/my-mods/tree/main/gitlab-sync. Run claude plugin validate on it first and show me what it can access before you enable it.

What is gitlab-sync?

Is gitlab-sync safe to install?

API calls in its code

How do I install gitlab-sync?

Or ask Claude to set it up

More from StalicJi/my-mods