coderabbit-resolver

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a legitimate workflow for GitHub Pull Request automation using official CLI tools (gh and git).
  • [SAFE]: Data ingestion from external sources (PR comments and CI logs) is restricted to the specific coderabbitai bot and is used solely for the stated purpose of resolving review findings.
  • [SAFE]: Thread resolution is performed through targeted GraphQL mutations, minimizing the risk of unintended repository changes.
  • [SAFE]: Rate-limit handling in wait-for-ratelimit.sh safely parses numeric values from bot comments to determine wait periods, avoiding shell injection risks.
  • [SAFE]: The skill adheres to platform best practices by wrapping wait logic in dedicated shell scripts to maintain session stability.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 03:21 PM
Security Audit — agent-trust-hub — coderabbit-resolver