coderabbit-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a documentation and migration utility for CodeRabbit configuration files. All external references are to official CodeRabbit domains and resources.
- [DYNAMIC_EXECUTION]: Step 6 of the skill includes a validation script that executes a hardcoded Python snippet. The script uses
yaml.safe_load(), which is the industry-standard secure method for parsing YAML to prevent arbitrary code execution during the loading process. - [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface where it reads a local repository file (
.coderabbit.yaml). However, this surface is handled securely: - Ingestion points: The
.coderabbit.yamlfile is ingested by a validation script in SKILL.md. - Boundary markers: The script output is strictly defined by the validation logic, which only prints status information.
- Capability inventory: The skill utilizes
Bash,Read,Write, andEdittools for configuration management. - Sanitization: The input is sanitized through the use of
yaml.safe_load(), mitigating risks associated with untrusted data in configuration files.
Audit Metadata