coderabbit-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides configuration templates and audit scripts for managing CodeRabbit enterprise settings.
- [COMMAND_EXECUTION]: The skill includes a shell script in Step 5 that utilizes the
gh(GitHub CLI) tool to list repositories and audit review counts. These commands are executed within the user's local environment, target the user's own GitHub organization, and employ secure JSON parsing withjq. - [INDIRECT_PROMPT_INJECTION]: The skill guides the creation of
.coderabbit.yamlfiles which instruct AI agents on how to conduct reviews (e.g., profile settings, path instructions). While these configurations influence AI behavior, they are standard administrative templates intended for organization-wide governance and do not represent a vulnerability surface for external attackers. - [EXTERNAL_DOWNLOADS]: The skill references documentation and dashboard URLs from
coderabbit.ai. These are well-known services directly related to the skill's primary purpose and do not involve remote code execution or untrusted package installation.
Audit Metadata