coderabbit

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
references/claude-code-integration.md

The fragment is documentation for a legitimate-looking CodeRabbit and Claude Code integration. It contains no direct evidence of malware or intentional data theft. The `curl | sh` installation pattern is a significant supply-chain security warning, and autonomous review/fix behavior plus transmission of repository contents introduces integrity and confidentiality risks. Users should inspect and pin or verify the installer before execution, review privacy settings, and require human approval for generated changes.

Confidence: 98%Severity: 56%
Audit Metadata
Analyzed At
Sep 18, 2026, 12:53 AM
Package URL
pkg:socket/skills-sh/basher83%2Flunar-claude%2Fcoderabbit%2F@65fc76d462018823bf69db3e43b74ba88712d492c728985a9c3646b26c93ae58