Skills
skills/pedronauck/skills/fix-coderabbit-review/Gen Agent Trust Hub

fix-coderabbit-review

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill's behavior aligns with its documented purpose.
  • [COMMAND_EXECUTION]: The script scripts/pr_review.py executes local git commands to retrieve repository metadata via subprocess.run. Additionally, the skill workflow involves running standard development tools such as pnpm lint, pnpm test, and git commit as part of its remediation logic.
  • [EXTERNAL_DOWNLOADS]: The Python scripts utilize the httpx library to interact with the official GitHub API (api.github.com) to fetch PR comments and resolve threads. These interactions are restricted to comments from the legitimate coderabbitai[bot] account, reducing the risk of processing untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 05:29 PM