coderabbit-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the CodeRabbit CLI installation script from its official service domain (cli.coderabbit.ai).
- [REMOTE_CODE_EXECUTION]: The downloaded installation script is executed directly in the shell environment using the curl piped to sh pattern.
- [COMMAND_EXECUTION]: Utilizes shell commands for installation, authentication, and execution of the CodeRabbit CLI (cr) and Git operations within the development environment.
- [PERSISTENCE]: Instructions demonstrate the creation of a pre-push Git hook in the .git/hooks directory, which automates the execution of code reviews during the Git workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for an AI tool to read and analyze local source code, which serves as a potential surface for instructions embedded in code comments to influence the AI's review output.
- Ingestion points: Local source code files (staged or unstaged) are ingested by the
cr reviewcommand. - Boundary markers: The skill instructions do not specify explicit delimiters or "ignore previous instruction" wrappers for the ingested source code.
- Capability inventory: The skill is scoped to use Bash for specific tool prefixes (cr, git, npm) and has standard file system access (Read, Write, Edit).
- Sanitization: No content filtering or sanitization of the processed source code is performed before the review execution.
Audit Metadata