sast-configuration
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and configuration templates for industry-standard SAST tools such as Semgrep, SonarQube, and CodeQL.
- [EXTERNAL_DOWNLOADS]: Includes instructions for installing Semgrep via pip and the CodeQL extension via the GitHub CLI. These are well-known security tools from established sources.
- [COMMAND_EXECUTION]: Provides example commands for running security scans and a local setup script (
scripts/run-sast.sh) included within the skill package.
Audit Metadata