Help us improve
Share bugs, ideas, or general feedback.
From coderabbit-pack
Configures CodeRabbit.yaml for excluding sensitive files, secret detection in PRs, review scope limits, and data retention to meet GDPR/CCPA privacy compliance.
npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin coderabbit-packHow this skill is triggered — by the user, by Claude, or both
Slash command
/coderabbit-pack:coderabbit-data-handlingThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Manage code review data and sensitive patterns with CodeRabbit. Covers secret detection in PRs, sensitive file exclusion from AI review, review comment data retention, and configuring what code context gets sent to the AI engine.
Configures .coderabbit.yaml for CodeRabbit security PR reviews detecting secrets, SQLi, XSS, auth issues, and OWASP risks with path instructions and file filters.
Runs AI-powered code reviews using CodeRabbit CLI to find bugs, security issues, and quality risks in staged/committed changes, PRs, or git directories.
Creates p5.js generative art with seeded randomness, noise fields, and interactive parameter exploration. Use for algorithmic art, flow fields, or particle systems.
Share bugs, ideas, or general feedback.
Manage code review data and sensitive patterns with CodeRabbit. Covers secret detection in PRs, sensitive file exclusion from AI review, review comment data retention, and configuring what code context gets sent to the AI engine.
# .coderabbit.yaml - Data handling configuration
reviews:
path_filters:
# Never send these to AI review
- "!**/.env*"
- "!**/credentials*"
- "!**/secrets*"
- "!**/*.pem"
- "!**/*.key"
- "!**/*.p12"
- "!**/serviceAccountKey*"
- "!**/terraform.tfstate*"
- "!**/*.tfvars"
# Exclude large generated files
- "!**/package-lock.json"
- "!**/pnpm-lock.yaml"
- "!**/yarn.lock"
- "!**/*.generated.*"
- "!**/dist/**"
- "!**/coverage/**"
# .coderabbit.yaml - Instruct AI to flag secrets
reviews:
path_instructions:
- path: "**"
instructions: |
CRITICAL: Flag any of these patterns as HIGH SEVERITY:
- Hardcoded API keys, tokens, or passwords
- AWS access keys (AKIA...)
- Private keys or certificates
- Database connection strings with credentials
- JWT secrets or signing keys
- Webhook URLs with tokens in query params
If you find any secrets, add a comment:
"SECURITY: Hardcoded secret detected. Move to environment variable."
- path: "**/*.{yml,yaml}"
instructions: |
Check CI/CD files for:
- Secrets logged in step names or echo statements
- Unpinned GitHub Actions (use SHA, not tags)
- Missing secret masking in outputs
# Control what context CodeRabbit accesses
reviews:
auto_review:
enabled: true
drafts: false # Don't review draft PRs (may contain WIP secrets)
base_branches:
- "main"
- "develop"
ignore_title_keywords:
- "WIP"
- "DO NOT REVIEW"
- "DRAFT"
# Limit file types reviewed
path_filters:
# Only review source code, not data
- "+src/**"
- "+lib/**"
- "+app/**"
- "+tests/**"
- "+.github/**"
- "!**/*.csv"
- "!**/*.json" # Exclude data files
- "!**/fixtures/**" # Exclude test fixtures with sample data
- "!**/seeds/**" # Exclude database seeds
# .coderabbit.yaml - Custom pattern detection
reviews:
path_instructions:
- path: "src/db/**"
instructions: |
Review database code for:
- SQL injection vulnerabilities (string concatenation in queries)
- Unparameterized queries
- PII logged in error messages
- Missing data sanitization on inputs
- path: "src/api/**"
instructions: |
Review API endpoints for:
- User input not validated before processing
- Sensitive data in response bodies (passwords, tokens)
- Missing authentication checks
- Overly permissive CORS configuration
- PII in URL parameters (should be POST body instead)
- path: "src/auth/**"
instructions: |
SECURITY-CRITICAL PATH. Review for:
- Token expiry configuration
- Password hashing (must use bcrypt/argon2, never MD5/SHA)
- Session fixation vulnerabilities
- CSRF protection
| Issue | Cause | Solution |
|---|---|---|
| Secret in reviewed PR | Not in exclusion list | Add pattern to path_filters |
| Large diff reviewed | Generated code included | Exclude generated file paths |
| Sensitive fixture data | Test data has real PII | Exclude fixtures directory |
| Review on draft PR | drafts setting enabled | Set drafts: false |
# .coderabbit.yaml - Security-focused setup
reviews:
auto_review:
enabled: true
drafts: false
path_filters:
- "!**/.env*"
- "!**/*.key"
- "!**/*.pem"
- "!**/secrets/**"
path_instructions:
- path: "**"
instructions: "Flag any hardcoded secrets, API keys, or credentials."
For security hardening, see coderabbit-security-basics.