Skill UI

This skill executes CodeRabbit's core workflow, providing automated, in-depth code reviews directly on pull requests. It analyzes code diffs based on custom rules (e.g., API validation, DB security), generates detailed walkthrough summaries, and posts line-level feedback. Ideal for setting up robust CI/CD quality gates and maintaining high code standards throughout the development lifecycle.

This skill guides users on fine-tuning CodeRabbit's review quality. It teaches the AI agent team preferences through PR feedback, integrates custom code guidelines (e.g., security policies), allows customization of the review tone, and implements path filters to drastically reduce false positives and noise. This ensures that all code feedback is highly relevant, actionable, and aligns with specific team standards.

This skill guides the comprehensive, multi-step rollout of CodeRabbit AI code review across an entire organization. It covers setting organization-level defaults, customizing team-specific review rules (e.g., API security, frontend performance), and automating deployment via multi-repo scripts and branch protection enforcement. Use when establishing standardized, high-quality AI code review practices company-wide.

This skill details how to configure CodeRabbit review behavior using a `.coderabbit.yaml` file placed on base branches. It enables setting tailored code quality gates across the development lifecycle, allowing for relaxed reviews on feature branches and highly stringent, security-focused checks for production or release environments, ensuring quality matches risk.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Orchestrates an exhaustive, multi-dimensional code review process by coordinating specialized agents (e.g., security, performance, quality, architecture). This workflow covers code quality, architectural integrity, security vulnerabilities (OWASP Top 10), performance bottlenecks, and test coverage, providing consolidated, actionable feedback and remediation guidance.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.

Automates Istio and Linkerd configuration for microservices, generating production-ready manifests and setup code tailored to your infrastructure, emphasizing security, observability, and traffic management best practices.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.

Assists container security auditors within the Security Advanced domain by auto-activating when key terms appear, walking through best-practice guidance, producing production-ready code/configurations, and validating results against compliance and threat-modeling standards.

Automatically assists with generating Content Security Policies, offering step-by-step guidance, production-ready code, and validation against common standards whenever you mention or ask about CSP generation.