qodo-get-rules

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Uses git to determine repository scope and python3 to parse configuration files and generate unique identifiers (UUIDs) for API request correlation.
  • [EXTERNAL_DOWNLOADS]: Fetches JSON data containing coding rules from the Qodo platform API. The target domains (e.g., qodo-platform.qodo.ai) are official vendor resources and are used as intended for the skill's functionality.
  • [CREDENTIALS_UNSAFE]: Accesses a local configuration file at ~/.qodo/config.json to retrieve the API_KEY required for platform authentication. This follows standard secret management practices for local development tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 08:59 PM