coderabbit-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local .coderabbit.yaml file and GitHub API responses while the agent has access to command execution tools. \n
- Ingestion points: Local .coderabbit.yaml file and various GitHub API endpoints via gh api providing pull request and installation metadata. \n
- Boundary markers: None. The skill does not employ specific delimiters or 'ignore' instructions when presenting this external data to the agent. \n
- Capability inventory: Bash (for gh, git, python3), Read, and Grep tools. \n
- Sanitization: None. Data from the repository and API is ingested and logged without filtering or validation against prompt injection. \n- [DYNAMIC_EXECUTION]: The skill performs runtime script execution to validate configuration files. \n
- Evidence: Step 2 uses python3 -c to execute a multi-line Python script that imports the yaml module and performs safety-conscious validation using yaml.safe_load(). \n- [COMMAND_EXECUTION]: The skill relies on executing multiple shell commands to collect diagnostic data. \n
- Evidence: Uses gh api for GitHub interactions, git branch/remote for local repository metadata, and standard shell redirection to compile findings into a local .txt bundle file.
Audit Metadata