coderabbit-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include usage of the GitHub CLI (
gh) to query repository installation details and post pull request comments, as well as Git commands to inspect local state. These are used strictly for diagnostic purposes related to the skill's stated goal. - [EXTERNAL_DOWNLOADS]: The skill references several external resources for troubleshooting, including
status.coderabbit.ai,docs.coderabbit.ai,app.coderabbit.ai, andyamllint.com. These are official service endpoints or well-known developer tools. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process the repository's
.coderabbit.yamlfile. - Ingestion points: Reads the
.coderabbit.yamlconfiguration file from the repository root. - Boundary markers: None explicitly defined in the prompts.
- Capability inventory: Uses
gh api,gh pr comment,git, andpython3for YAML validation. - Sanitization: The skill explicitly recommends using
yaml.safe_load()for validation, which is a secure practice to prevent code execution during parsing.
Audit Metadata