skills/jeremylongshore/tons-of-skills-marketplace/coderabbit-reference-architecture/Gen Agent Trust Hub
coderabbit-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a template provider for CodeRabbit configuration files. The provided instructions and templates encourage security-conscious practices, including input validation, parameterized queries, and CSRF protection.
- [DYNAMIC_EXECUTION]: The troubleshooting section includes a command to validate YAML syntax:
python3 -c "import yaml; yaml.safe_load(open('.coderabbit.yaml'))". This is a safe usage of dynamic execution as it employsyaml.safe_load(), which is the industry standard for preventing arbitrary code execution during YAML parsing. - [EXTERNAL_DOWNLOADS]: The CI pipeline integration examples reference standard GitHub Actions:
actions/checkout@v4andactions/github-script@v7. These are official actions provided by the GitHub 'actions' organization and do not pose a security risk.
Audit Metadata