coderabbit-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for integrating CodeRabbit with GitHub workflows. It uses official libraries and tools such as Octokit and the GitHub CLI to interact with established service endpoints.
- [INDIRECT_PROMPT_INJECTION]: The skill includes logic for fetching and processing external data from GitHub pull request comments. While this introduces a data ingestion surface, the provided scripts perform benign operations like severity classification and logging, representing a standard implementation of the intended functionality without risky execution of the ingested data.
Audit Metadata