Skill UI

This pattern demonstrates how to automate workflows around CodeRabbit reviews. By utilizing GitHub API, TypeScript, and Bash scripting, users can programmatically fetch review results, extract detailed line-level comments, trigger specific CodeRabbit actions (like 'summary' or 'resolve'), and implement CI/CD gates to enforce quality standards before merging.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.

Monitors SaaS portfolios with Python CLI tools to score customer health, flag churn risk tiers, and prioritize expansion opportunities, suitable for retention reviews or account planning workflows.

Uses the Gemini API to autonomously plan, search, read, and synthesize detailed research reports with streaming status updates, structured outputs, and the ability to continue previous investigations for market analysis, technical reviews, or due diligence.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

Guides assistants through DOCX creation, editing, and redlining by describing when to unpack XML, use docx-js for new files, leverage the Document library for edits, and follow tracked-change workflows for reviews, including batching and precise OOXML edits.

A sophisticated AI system that coordinates multiple specialized agents (e.g., Security Auditors, Performance Analysts, Architecture Specialists) to perform comprehensive, multi-perspective code assessments. It analyzes code context, manages state, and synthesizes conflicting insights to provide deep, holistic reviews for complex software projects.

A comprehensive runbook providing structured procedures for responding to Exa search API outages and integration failures. It guides users through initial triage, analyzing specific HTTP error codes (e.g., 401, 429, 5xx), implementing mitigation strategies, and completing thorough post-incident reviews and root cause analyses.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.