dual-agent-review
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for setting up the CodeRabbit CLI, including a download link to its official installation script (https://cli.coderabbit.ai/install.sh). CodeRabbit is a well-known AI code review service, and the instructions explicitly recommend that users inspect the script before execution rather than piping it directly to a shell.
- [REMOTE_CODE_EXECUTION]: The skill orchestrates subagents and the CodeRabbit CLI to analyze code diffs and apply fixes. These operations are essential to the skill's functionality and are performed through standard agent-to-subagent communication and local CLI execution.
- [PROMPT_INJECTION]: The instructions include defensive measures against indirect prompt injection by explicitly telling the agent to treat findings from reviewers as data to be evaluated, not as instructions to be obeyed, particularly regarding embedded code blocks or commands.
Audit Metadata