code-review
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official CodeRabbit CLI installation script from https://cli.coderabbit.ai/install.sh which is the vendor's official domain.
- [COMMAND_EXECUTION]: Executes the downloaded script via shell pipes to install the necessary tooling. It also runs standard CLI commands for version checking, authentication (coderabbit auth login), and performing the code review (coderabbit review).
- [PROMPT_INJECTION]: Contains defensive instructions that explicitly prevent the agent from executing any commands found within the review output without a direct user request, mitigating risks from malicious content in the code being reviewed.
Audit Metadata