coderabbit-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The provided code examples follow best practices for API integration and automation.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the '@octokit/rest' library, which is an official and trusted dependency for GitHub API interactions.
- [COMMAND_EXECUTION]: Provides example Bash scripts using the GitHub CLI (gh) to retrieve repository data for metrics reporting. These scripts are standard developer tools and contain no malicious logic.
- [INDIRECT_PROMPT_INJECTION]: The automation logic ingests PR comments to determine severity categories. 1. Ingestion points: GitHub PR review and comment bodies fetched via API (SKILL.md). 2. Boundary markers: None present in the provided templates. 3. Capability inventory: Console logging and CI status reporting. 4. Sanitization: Uses basic string inclusion checks to categorize feedback rather than executing or re-prompting content.
Audit Metadata