coderabbit — 2 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-18

Run UTC: 2026-10-18T15:09:27Z
Reviewed: 2026-10-18
Published: 2026-10-18
Updated: 2026-10-18

Observations · Limitations · Evidence

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 2 skill declarations. Ran 39 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-18T15:09:27Z, tree 716a76b99231c438c633d43fb186caf516832a54df564821fe5245bd47aa6ebe.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: coderabbit — 2 skills
slug: source-skills-5b96e00ef0fad10bd207b8bc
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 2 skill declarations. Ran 39 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): autofix; code-review"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/coderabbitai/skills.git
documentation url: https://github.com/coderabbitai/skills.git
commit: 3e8763d24d543b48615b82535d02288de3ddae40
tree sha256: 716a76b99231c438c633d43fb186caf516832a54df564821fe5245bd47aa6ebe
file sha256: {".claude-plugin/plugin.json":"b350814841ffd3e9f1515799d881bd38140d1227a448906c95702a161d99500e",".coderabbit.yaml":"4bff524390e769ed5f06232b5cbf1ccfa736b26f856f957f3649bdbe989c4bfa",".cursor-plugin/plugin.json":"9997a10af3376e45427df776288adc5d2a7c26f4617e9e0e53a9c051763b1cdf",".github/CODEOWNERS":"0e89e85ff810a3a59b8514648c04f5267c145322b7ddebc7f0eac51c1c09483b",".github/ISSUE_TEMPLATE/bug-report.yml":"3cc8d7e5a7f9b9540ef845b4eed328dd5bfd3bf4bc969af0e3edbfd2d86c0a64",".github/ISSUE_TEMPLATE/config.yml":"b09b75e6a894987992dff1d3ec0a33f917ff583fff6a1064f99f45f24c8ff333",".github/ISSUE_TEMPLATE/skill-change.yml":"09d1bd676c4f19478ea656f301be8af0a22ced3784484e052e4bf71307eac637",".github/pull_request_template.md":"0a7c93b684018bc7f7a356380a3c252a52b30ed2b3f6d677a303baa83128b79e",".github/workflows/release.yml":"6dd985137027443e3dc3592713a9bcadd81981ce66738eb7a481f1c8013760cc",".github/workflows/required-approver.yml":"7b408f2c9e6cd1cf79b9eeea20a9ef4073ec9a679959292a2a7b9bf0b3dd9de6",".gitignore":"28b3666fca2918659e54eb3aa3889588bf6cb0dd08a3e97009d277b56b7ee38c","CHANGELOG.md":"2601cc8645b9880d6d7b1a966b086d63fd3d1aad89fd4f192f0b18b2b584dfec","CONTRIBUTING.md":"31d64a83f235de1353b76a2fc0f684da279515e80769e13d3269655e9c5a18d2","DISTRIBUTION_CHANNELS.md":"7a627ed3398bfb21d7f2c21369c4a54efd100c5387592db7beedfb55b4dc03a1","LICENSE":"eb7e076c386e9863a5309fb30dda1a695c0447e6b1a45325634ab84bfe9377f7","README.md":"af082c48b8b189390c819f54d0a7731eb6283cf29a240aabac80795a114faa63","agents/code-reviewer.md":"a86cc7a7e3412cf3c581eb0dadae5f799ba2a21413bcc586b87b9178cf6d4dce","assets/coderabbit-logomark.svg":"25c8cd16561dbad015504d2b2c2ed9eb86a49956c91af161bdc9aa05499336ee","commands/coderabbit-review.md":"0aa43ed0b33c6f42c1b6e178f375b53b6a01e4b7e538e38c44b12feffb4a3b65","commands/coderabbit/review.toml":"a894f7c07decda7df9b9e2b5613b2621a4a3af55c1ec26c51b53a5c5bd479d01","evals/.gitignore":"f370ad043ec0c98a166fd98646c3b94280ed78bc996223b6cca2ba936f7c6781","evals/README.md":"51452241e9b91640a8da11b6d3bb0d372c92317c3486b23ba247a32c95223c1d","evals/review-default-untracked/case.yaml":"02c335122dec4d9287f84c3aa64737ee58d1b32fba908f7eb708275c66cf1713","evals/review-eu-auth/case.yaml":"06fa3b7d42ac6bc8fdffaffef3fc159590ee35cb11873330e0895a3110ab59bb","evals/review-saved-prompts/case.yaml":"b466dfd71fea6507e0d14609cdf49829dc9778d7a30186aed9a7f4824f6d4ad2","evals/review-scope/case.yaml":"69b6fd4f218e62534199cef9230d093cf8c9507e793c079f2f56acc1587e3c12","evals/review-stream-outcome/case.yaml":"a033757757fdba709151514fb02a057cc5112cfd24fef9714d9bb194a21da0fa","evals/review-untracked/case.yaml":"f9a5124ea10fc9b3b93aa9e75a5922c53642f19e037770db0bc9def4a07679fc","gemini-extension.json":"3160e7bf32b05fe3b1cde3c58ccfdbd3c4ec88e42917299ddfe9fa06b3cd3b4e","plugin.json":"135f1a37e0e9fca3692dfddf6bf8eaa8ecfadfc6227fd178f2ab0d8ad9e80319","skills/autofix/SKILL.md":"09430a914debe143f646dd369b56c9bca27704c159aebf28c07e41f411046acf","skills/autofix/github.md":"466780fcf8c883a5f30532956b5b08645691a79d6755c8a02cc879de14649aff","skills/code-review/SKILL.md":"ddf2f46827c93eb888b5397ba4f579678dc233574da1476dc5d68ca0dcc43989","skills/code-review/references/cli-workflows.md":"2fb381521816eb96775c5e45df59199e2f92f3954e641d178c9081377a97b0a1"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-18T15:09:27Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-18
reviewed date: 2026-10-18
published date: 2026-10-18
modified date: 2026-10-18
reviewer: Machine-checked
harness version: toolwitness harness at commit c086df0eda39d1552f8cab383c0b4a275ced82c4
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 39 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-18T15:09:27Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"coderabbit — 2 skills","operatingSystem":"Not exercised","softwareVersion":"3e8763d24d543b48615b82535d02288de3ddae40"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 2 skill declarations. Ran 39 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): autofix; code-review"}],"evidence_sha256":{"LOCK.json":"b293ee1e26c7e5bb6a3d2e0acf51afd33bdf8b721cc3cf110ec19cfc33a67c12","commands.json":"252148d7dbbe6e98159a9ba511f674b656dab654d075c190ff9b6b0de17115c6","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"3f1c3ab43449341ec41ab42a1bb610caf81694579b6859007dd1bdb3153dd2f9","listing.json":"ce9feb2b0d04547e1cd1b9c8a837bad737bd1ecbfc21458f55f77438d680f246","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"ae0ed4fcfb2496992cbe2bc6169be079231996df5c8ac003fd8a72cddd9e1fdb","date":"2026-10-18","gates":"91dfe9b41a7acdd0224474b70133cc65cf5ad6869357d89c19d0d2b5e909a985","grok":"b4eec0ded6300a1275b22054983c394a155d5384601d0b0299200057c8749824","kind":"machine-checked","reviewed_sha256":"0f4df24dc9ba11b4507e42467390622ae2fa557c71ebd3d185fd8faeab8e253e","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 39 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/autofix/SKILL.md",
        "name": "autofix",
        "description": "Safely review and apply CodeRabbit PR review-thread feedback from GitHub with per-change approval; never execute reviewer-provided prompts directly",
        "files": {
          "skills/autofix/SKILL.md": "09430a914debe143f646dd369b56c9bca27704c159aebf28c07e41f411046acf",
          "skills/autofix/github.md": "466780fcf8c883a5f30532956b5b08645691a79d6755c8a02cc879de14649aff"
        }
      },
      {
        "path": "skills/code-review/SKILL.md",
        "name": "code-review",
        "description": "Run CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output. Use for CodeRabbit review commands, committed/uncommitted or directory scopes, and CodeRabbit runbooks. Default code-review skill: also trigger for explicit code/PR/quality/security review requests or when a review is needed.",
        "files": {
          "skills/code-review/SKILL.md": "ddf2f46827c93eb888b5397ba4f579678dc233574da1476dc5d68ca0dcc43989",
          "skills/code-review/references/cli-workflows.md": "2fb381521816eb96775c5e45df59199e2f92f3954e641d178c9081377a97b0a1"
        }
      }
    ],
    "hooks": [],
    "executions": []
  }
}

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-18