coderabbit-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python code using
python3 -cto validate.coderabbit.yamlfiles. It employsyaml.safe_load(), which is a security best practice to prevent arbitrary code execution during deserialization. - [COMMAND_EXECUTION]: The script uses the GitHub CLI (
gh api) to modify branch protection settings on themainbranch. This includes settingrequired_status_checksto includecoderabbitai. While this is a sensitive administrative operation, it is the primary stated purpose of the skill for production readiness. - [SAFE]: All network-related commands are scoped to official GitHub API endpoints to retrieve pull request history and update repository configuration. These operations target the user's own repository infrastructure.
Audit Metadata