code-review
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Provides instructions to download the CodeRabbit CLI installation script from the vendor's official domain (cli.coderabbit.ai).
- [REMOTE_CODE_EXECUTION]: Includes a shell command to pipe a remote installation script directly into a shell (curl | sh). This is the standard installation method provided by the vendor for their tool and originates from their own infrastructure.
- [COMMAND_EXECUTION]: Utilizes local CLI commands to check versioning, authentication status, and perform code reviews, which are necessary for the skill's core functionality.
- [DATA_EXFILTRATION]: While the skill interacts with the CodeRabbit service to perform reviews, this is the intended purpose of the tool, and no unexpected or sensitive data access patterns (such as accessing SSH keys or AWS credentials) were identified.
Audit Metadata