coderabbit-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the setup of an automated review workflow that ingests potentially untrusted data from pull request content, presenting a surface for indirect prompt injection.
- Ingestion points: Pull request diffs, descriptions, and user comments are ingested for analysis as part of the review lifecycle described in the instructions.
- Boundary markers: The provided configuration templates do not include explicit delimiters or instructions for the agent to ignore commands embedded within the code being analyzed.
- Capability inventory: The skill environment allows for file system operations (
Read,Write,Edit) and repository management tasks using thegitandghtools. - Sanitization: The workflow does not document any mechanisms for sanitizing or validating the data retrieved from external pull requests before processing.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and configuration guides from CodeRabbit's verified domain (
docs.coderabbit.ai).
Audit Metadata