coderabbit-data-handling
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides configuration templates for CodeRabbit that follow security best practices. It includes path filters to exclude sensitive files like
.env, credentials, and private keys from being sent to external AI services. - [DATA_EXPOSURE]: The skill explicitly instructs the user to redact and exclude sensitive data, which is a defensive measure to prevent unintended data exposure to AI engines.
- [PROMPT_INJECTION]: While the skill contains instructions for an AI engine (CodeRabbit) to flag secrets and vulnerabilities, these are legitimate configuration parameters for the tool and do not constitute an attempt to bypass the host agent's safety guardrails.
- [EXTERNAL_DOWNLOADS]: The skill references documentation links for CodeRabbit, which is a well-known service in the software development ecosystem.
Audit Metadata