跳转到主要内容
此内容尚未提供您的语言版本,正在以英文显示。

Greptile

Plugin 警告
75

AI-powered codebase search and understanding. Query your repositories using natural language to find relevant code, understand dependencies, and get contextual answers about your codebase architecture.

AI 摘要

This plugin connects Claude Code to your Greptile account, enabling you to view and resolve AI-generated code review comments on GitHub and GitLab pull requests. It provides tools for listing and getting details about pull requests and code reviews, as well as for triggering new reviews and searching comments.

Documentation

  • warning:Configuration & parameter referenceThe README documents the need for a `GREPTILE_API_KEY` environment variable but does not explicitly state it as a default or mention precedence order, which could lead to user confusion.

License

  • critical:License usabilityThere is no LICENSE file or SPDX identifier in the plugin's repository or manifest, making its licensing status unclear and non-compliant for redistribution.

Security

  • warning:Secret ManagementThe plugin uses an API key (`GREPTILE_API_KEY`) which is expected to be set as an environment variable. While it's not hardcoded, the README instructs users to add it to their shell profile, which could lead to accidental exposure if not managed carefully.
  • warning:Data ExfiltrationThe plugin requires an API key to communicate with Greptile. While this is necessary for functionality, the README instructs users to add it to their shell profile, which is a potential data exfiltration vector if not handled securely.
  • warning:Keychain-stored secretsThe plugin consumes an API key via an environment variable (`GREPTILE_API_KEY`) which is added to the shell profile, rather than being stored in a keychain or userConfig with `sensitive: true`.

Versioning

  • warning:Release ManagementNo manifest version, GitHub release tags, or CHANGELOG are present. The install instructions do not specify a version, implying the use of a main branch.

Compliance

  • info:GDPRThe plugin interacts with an external service that may process personal data. While the plugin itself does not handle personal data directly, the API key submitted to Greptile could be associated with user accounts, and the data processed by Greptile might include personal information. No specific sanitization is detailed for data sent to the 3rd party.

安装

请先添加 Marketplace

/plugin marketplace add anthropics/claude-plugins-official
/plugin install greptile@claude-plugins-official
更新于 6 days ago
查看源代码