Dossier
CodeRabbit
Coverage of CodeRabbit in the Nexus archive.
- 'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets
A technique called 'Ghostcommit' uses images to hide prompt injections, bypassing AI code reviewers like CodeRabbit and Bugbot. It exploits coding agents to extract secrets from a repo's .env file and encode them as numbers in code.
- Show HN: Stage – Putting humans back in control of code review
Stage is a code review tool developed by engineers Charles and Dean to streamline PR reviews by organizing changes into logical 'chapters', addressing frustrations with GitHub's UI and AI-generated code complexity. It emphasizes human oversight over automated tools like CodeRabbit or Greptile, syncing with GitHub workflows for seamless integration.