coderabbit-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes Python code using python3 -c to validate .coderabbit.yaml files. It employs yaml.safe_load(), which is a security best practice to prevent arbitrary code execution during deserialization.
  • [COMMAND_EXECUTION]: The script uses the GitHub CLI (gh api) to modify branch protection settings on the main branch. This includes setting required_status_checks to include coderabbitai. While this is a sensitive administrative operation, it is the primary stated purpose of the skill for production readiness.
  • [SAFE]: All network-related commands are scoped to official GitHub API endpoints to retrieve pull request history and update repository configuration. These operations target the user's own repository infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 11:30 AM
Security Audit — agent-trust-hub — coderabbit-prod-checklist