code-review
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypass attempts were detected during the analysis.
- [COMMAND_EXECUTION]: The skill utilizes the coderabbit CLI to perform code analysis. It includes necessary steps to verify the CLI's installation and authentication status before use.
- [DATA_EXFILTRATION]: While the skill transmits code diffs to the CodeRabbit API for analysis, this is the intended primary functionality. The instructions proactively advise the agent to verify that no secrets or credentials are included in the staged changes before transmission.
- [EXTERNAL_DOWNLOADS]: The skill directs users to the official vendor documentation for installation. It explicitly warns against insecure practices like piping remote scripts to a shell, recommending instead the use of verified binaries or package managers.
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent safety protocols or reveal system prompts.
Audit Metadata