CodeRabbit for VS Code ↗
CodeRabbit for VS Code is an officially published IDE extension from CodeRabbit. Anomity scores its risk at 10 out of 100 (low).
Analysis summary
CodeRabbit for VS Code is an officially published IDE extension from CodeRabbit. Anomity scores its risk at 10 out of 100 (low).
CodeRabbit's extension runs AI code review locally in the editor, reviewing uncommitted changes before they become a pull request and flagging correctness and style issues at the point where they are cheapest to fix.
It reads the working tree and diff, executes git commands to determine what changed, and calls the review service, so it declares filesystem read, git access, and outbound network. It is deliberately review-only rather than edit-capable, which is the right shape for this job — advisory output costs a human a moment of attention when wrong, where an automatic fix costs a debugging session. Note that reviewing a diff means the diff leaves the machine.
Why this entry scored 10 out of 100
This profile starts at the catalog's neutral base of 50. Because the entry is officially published, trust adjusts the score by -40. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 10, placing it in the low band.
Findings
-
Published by the vendor Trust offset
Capabilities
Every capability the entry declares, with the security implication of each.
-
filesystem:readFilesystem readCan read files on the host system. Used for context, indexing, or analysis. -
git:accessGit accessReads or writes through git. Allows changes to commit history, branches, and remotes. -
network:outboundOutbound networkCan make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.