
CodeRabbit
Plugin让 agent 调用 CodeRabbit CLI 评审本地改动,按严重程度列出缺陷与安全问题,并能在逐项确认后修复 PR 上 CodeRabbit 未解决的评审意见。CodeRabbit 官方维护,需安装 CLI 并登录,有免费额度。
CodeRabbit Skills and Plugins
The canonical home for CodeRabbit's agent-native skills and plugin packaging. Use it to install AI-powered code review into 35+ coding agents, Gemini CLI, Antigravity CLI, Claude Code, Cursor, and other supported agent environments.
CodeRabbit detects bugs, security issues, and quality risks before you merge.
Quickstart
Install the CodeRabbit CLI via the CLI docs, then tell your agent: “Review my code.” The review command starts the authentication flow when needed.
Installation
1. Install the CodeRabbit CLI
Use the CLI docs for the primary install path. They cover Homebrew, the install script, and CLI usage.
2. Install the agent integration
Choose the path that matches your coding agent.
Skills installer
For agents that support portable SKILL.md files, use the
skills docs.
npx skills add coderabbitai/skills
Installation options for the skills installer:
| Flag | Purpose |
|---|---|
-g, --global | Install to user directory instead of project |
-a, --agent | Target specific agents (for example claude-code) |
-s, --skill | Install particular skills by name |
--all | Install all skills to all agents without prompts |
Claude Plugin
In Claude Code, install the plugin from the official marketplace:
/plugin marketplace update
/plugin install coderabbit@claude-plugins-official
A listing in the Claude directory is in review. Once it's published, you'll also be able to add CodeRabbit from Customize > Plugins > Discover in claude.ai or the Claude desktop app, and it will sync to Claude Code sessions where you're signed in with the same claude.ai account. If you install from both places, Claude Code loads the marketplace copy.
For the full setup flow, see the Claude Code integration guide.
Cursor Plugin
This repository now includes Cursor marketplace metadata in
/.cursor-plugin/plugin.json.
After publication, Cursor marketplace installs use:
/add-plugin coderabbit
For the current recommended setup, see the Cursor integration guide.
Gemini CLI Extension (pre-release)
Until v1.2.0 is published as the Latest release, Gemini CLI users can install
the native extension from main:
gemini extensions install https://github.com/coderabbitai/skills --ref main
gemini extensions list
After v1.2.0 is published, the --ref main option can be omitted.
The repository-root gemini-extension.json packages
the portable skills, /coderabbit:review command, and both subagents.
This native extension is separate from the generic skills-installer path above.
Antigravity CLI Plugin
Antigravity CLI users can install the native plugin directly from this repository:
agy plugin install https://github.com/coderabbitai/skills
agy plugin list
The repository-root plugin.json manifest packages the skills,
review command, and both subagents for Antigravity CLI's plugin discovery.
Codex App
Codex users can install the official CodeRabbit plugin by following the Codex app integration guide.
Native Codex metadata in .codex-plugin/plugin.json
references the existing skills/ directory. Marketplace publication remains a
separate step; this source change does not update the live listing.
For an at-a-glance inventory of active and repo-packaged distribution paths, see DISTRIBUTION_CHANNELS.md.
What Lives Here
| Path | Purpose |
|---|---|
skills/ | Portable CodeRabbit skills for agents that support SKILL.md. |
.claude-plugin/ | Claude Code plugin marketplace metadata. |
commands/ | Native review commands for Gemini CLI and Antigravity CLI. |
agents/ | code-reviewer and autofix subagents shipped to Claude Code, Gemini CLI, and Antigravity CLI. |
.cursor-plugin/ | Cursor marketplace metadata. |
.codex-plugin/ | Codex metadata referencing the shared skills. |
gemini-extension.json | Gemini CLI extension manifest. |
plugin.json | Antigravity CLI plugin manifest. |
assets/ | Shared marketplace and brand assets. |
DISTRIBUTION_CHANNELS.md | Maintainer inventory of live, packaged, and in-development channels. |
Usage
Once installed, just ask your agent:
Review my code
Check for security issues
What's wrong with my changes?
Run a code review
Review my PR
Review the directory at ../my-service
The agent will automatically:
- Check if CodeRabbit CLI is installed
- Run the review on your changes
- Present findings grouped by severity
- Optionally fix issues and re-review
When you ask for a specific review directory, the agent can pass CodeRabbit CLI
--dir <path> after confirming that path is inside an initialized Git working
tree.
Supported Agents
CodeRabbit supports 35+ coding agents.
| Agent | Project Path | Global Path |
|---|---|---|
| Amp, Kimi Code CLI | .agents/skills/ | ~/.config/agents/skills/ |
| Antigravity CLI | .agents/skills/ | ~/.gemini/config/skills/ |
| Claude Code | .claude/skills/ | ~/.claude/skills/ |
| Cline | .cline/skills/ | ~/.cline/skills/ |
| CodeBuddy | .codebuddy/skills/ | ~/.codebuddy/skills/ |
| Codex | .codex/skills/ | ~/.codex/skills/ |
| Command Code | .commandcode/skills/ | ~/.commandcode/skills/ |
| Continue | .continue/skills/ | ~/.continue/skills/ |
| Crush | .crush/skills/ | ~/.config/crush/skills/ |
| Cursor | .cursor/skills/ | ~/.cursor/skills/ |
| Droid | .factory/skills/ | ~/.factory/skills/ |
| Gemini CLI | .gemini/skills/ | ~/.gemini/skills/ |
| GitHub Copilot | .github/skills/ | ~/.copilot/skills/ |
| Goose | .goose/skills/ | ~/.config/goose/skills/ |
| Junie | .junie/skills/ | ~/.junie/skills/ |
| Kilo Code | .kilocode/skills/ | ~/.kilocode/skills/ |
| Kiro CLI | .kiro/skills/ | ~/.kiro/skills/ |
| Kode | .kode/skills/ | ~/.kode/skills/ |
| MCPJam | .mcpjam/skills/ | ~/.mcpjam/skills/ |
| Moltbot | skills/ | ~/.moltbot/skills/ |
| Mux | .mux/skills/ | ~/.mux/skills/ |
| Neovate | .neovate/skills/ | ~/.neovate/skills/ |
| OpenClaude IDE | .openclaude/skills/ | ~/.openclaude/skills/ |
| OpenCode | .opencode/skills/ | ~/.config/opencode/skills/ |
| OpenHands | .openhands/skills/ | ~/.openhands/skills/ |
| Pi | .pi/skills/ | ~/.pi/agent/skills/ |
| Pochi | .pochi/skills/ | ~/.pochi/skills/ |
| Qoder | .qoder/skills/ | ~/.qoder/skills/ |
| Qwen Code | .qwen/skills/ | ~/.qwen/skills/ |
| Replit | .agent/skills/ | N/A (project-only) |
| Roo Code | .roo/skills/ | ~/.roo/skills/ |
| Trae | .trae/skills/ | ~/.trae/skills/ |
| Trae CN | .trae/skills/ | ~/.trae-cn/skills/ |
| Windsurf | .windsurf/skills/ | ~/.codeium/windsurf/skills/ |
| Zencoder | .zencoder/skills/ | ~/.zencoder/skills/ |
Available Skills
code-review
AI-powered code review that finds bugs, security issues, and suggests improvements using CodeRabbit.
Use when:
- You want to review code changes before committing or merging
- Checking for bugs, security vulnerabilities, or anti-patterns
- Getting PR feedback or suggestions for improvements
- Running automated code quality checks
Categories covered: Bug detection, security analysis, code quality, performance issues, best practices
Triggers: "review my code", "check for bugs", "security review", "PR feedback", "run coderabbit"
Capabilities:
- Analyzes code changes for bugs, security issues, and anti-patterns
- Preserves finding severities (critical, major, minor, trivial, info, none)
- Supports autonomous fix-review cycles
- Reviews tracked changes by default, with committed and uncommitted scopes
- Supports directory-scoped reviews through CodeRabbit CLI
--dir <path>
autofix
Safe fix workflow for unresolved CodeRabbit GitHub PR review threads, with per-issue review and approval.
Use when:
- You already have an open GitHub PR reviewed by CodeRabbit
- You want to apply suggested fixes from unresolved current CodeRabbit review threads
- You want guided fixes with explicit approval for each change
Categories covered: Review-thread extraction, issue prioritization, guarded fixes, consolidated commit and PR summary
Triggers: "coderabbit autofix", "fix coderabbit", "cr fix"
Capabilities:
- Fetches unresolved current CodeRabbit review threads for the current PR
- Parses and prioritizes issues by severity
- Applies fixes only after validating the issue and getting approval
- Produces a single consolidated commit and posts a PR summary comment
Plugin Components
Claude Code
- Skills:
code-reviewandautofix. Run them as/coderabbit:code-reviewand/coderabbit:autofix, or ask in plain language, such as "review my changes" or "fix the CodeRabbit comments on this PR". - Subagents:
code-reviewerruns a CodeRabbit review in its own context, andautofixcollects and checks unresolved CodeRabbit review threads and returns a fix plan without editing anything. Mention them as@agent-coderabbit:code-reviewerand@agent-coderabbit:autofix. - Manifest:
.claude-plugin/plugin.json
The Claude plugin has no slash commands of its own. In Claude, use
/coderabbit:code-review instead of the earlier
/coderabbit:coderabbit-review.
The plugin runs reviews through the locally installed CodeRabbit CLI, so it needs a shell on a machine where the CLI is installed and logged in. Claude Code has full support. Cowork and Claude chat on the web, desktop, and mobile can load the skills, but a review runs only where the CodeRabbit CLI is available, and chat doesn't run subagents.
Cursor
- Marketplace manifest:
.cursor-plugin/plugin.json - Skills source:
skills/
Antigravity CLI
For sandboxed CLI sessions that cannot find or execute an installed CodeRabbit CLI, follow the scoped executable-access recovery. It keeps diagnostics sandboxed and retains per-command host approval for auth and review.
- Native plugin manifest:
plugin.json - Skills source:
skills/ - Review command:
/coderabbit:reviewfromcommands/coderabbit/review.toml(converted to a skill during installation) - Subagents:
agents/code-reviewer.md,agents/autofix.md
Gemini CLI
- Native extension manifest:
gemini-extension.json - Skills source:
skills/ - Slash command:
/coderabbit:review(commands/coderabbit/review.toml) - Subagents:
agents/code-reviewer.md,agents/autofix.md
Data and Privacy
The Claude plugin contains two skills and two subagents. It bundles no MCP servers, hooks, or executables.
- Local commands: the
code-reviewskill and thecode-reviewersubagent run the installedcoderabbitCLI and read-only Git commands. Theautofixskill uses the installed GitHub CLI (gh) to read CodeRabbit review threads on the current pull request and, when you approve, to create a pull request or post a summary comment. Theautofixsubagent only reads: it runs read-onlygitandghcommands and never edits, commits, pushes, or posts. - Data sent: when you run a review, the CodeRabbit CLI sends the code
changes under review and the repository context needed to review them to
CodeRabbit's service.
autofixexchanges pull request data with GitHub throughgh. The plugin sends nothing on its own. - Credentials: the CodeRabbit CLI and
ghhandle their own login and store their own credentials. The plugin doesn't read or send credentials. - Policy: CodeRabbit's handling, retention, and sharing of review data is described in the CodeRabbit Privacy Policy. Contact support@coderabbit.ai with questions.
Resources
- Documentation
- Support
- Privacy Policy
- Terms of Service
- CodeRabbit Documentation
- Vercel Skills CLI
- Agent Skills Specification
- Gemini CLI Extension Documentation
- Antigravity CLI Plugin Documentation
License
MIT
相關資源

Security Guidance
Plugin对 agent 写的代码做三层安全检查:编辑时按规则提示约 25 种危险写法,回合结束时让模型评审 diff,提交时由代理追踪跨文件漏洞(如 IDOR、SSRF)。Anthropic 官方插件,需要 Python 3.8+ 与可用的模型 API 通道。
anthropics/claude-plugins-official45.8k
Open Code Review
Skill驱动阿里开源的 ocr CLI 评审 Git 变更(工作区、单个提交或分支对比),按严重级别汇总逐行评审意见,用户要求时自动修复。需先配置 LLM 接口(Anthropic、OpenAI 等协议),缺少 CLI 时会自动安装。阿里巴巴官方维护。
alibaba/open-code-review49.6k
Claude Security
Plugin在会话内调度多个子代理梳理架构、建威胁模型、全面排查漏洞。每条发现都要先经独立复核才写进报告,报告另附 SARIF,还可以生成补丁文件由人决定是否应用。Anthropic 官方插件,需要 Python 3.9+。
anthropics/claude-plugins-official46.1k
Codex Security
Plugin对整个仓库或 PR、提交等代码变更做安全扫描,并提供威胁建模、漏洞研判、修复与复验,报告可导出 JSON、SARIF 等格式。OpenAI 官方 Codex 插件,需要开通 Codex Security 访问权限。
openai/plugins7.8k
SonarQube
Plugin在 agent 编码循环中接入 SonarQube 代码质量与安全检查:密钥扫描钩子、问题列表与修复、质量门禁、覆盖率与依赖风险查询;开通 Vortex 分析后每次编辑自动检查。Sonar 官方维护,需 SonarQube 账号(含免费 Community Build)、sonar CLI 与 Docker。
SonarSource/sonarqube-agent-plugins114
mattpocock/skills
PluginMatt Pocock 的工程技能集:用 /grill-me 追问需求、对齐意图,再走规格与工单流程、TDD、代码评审与领域建模;技能小而可组合。已收入 Claude Code 官方插件市场。
mattpocock/skills316k