semgrep
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional markdown and illustrative code snippets for static analysis. No executable scripts or automation logic are included in the provided file.
- [COMMAND_EXECUTION]: The skill documents standard CLI commands for the Semgrep tool (e.g.,
semgrep --config=auto .). These commands are used as educational examples for code scanning and do not involve suspicious parameters, privilege escalation, or exfiltration. - [REMOTE_CODE_EXECUTION]: No remote script downloads or piped shell execution patterns were identified. All referenced configurations (like
p/owasp-top-ten) are standard Semgrep registry shortcuts. - [DATA_EXFILTRATION]: There are no network operations, sensitive file path accesses, or credential harvesting patterns present in the documentation.
- [OBFUSCATION]: No encoded strings, hidden characters, or homoglyph attacks were found during the analysis of the text and code snippets.
- [PROMPT_INJECTION]: The instructions do not contain any directives aimed at bypassing safety guardrails or overriding agent behavior.
Audit Metadata