semantic-bug-detector

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as a static analysis tool, processing provided source code strings to identify common programming errors (off-by-one, null dereferences, etc.). It does not execute the code it analyzes.
  • [SAFE]: Python implementations utilize the standard 'ast' library for safe parsing and traversal of code structures, avoiding dangerous execution functions like 'eval' or 'exec' on user input.
  • [SAFE]: JavaScript and Java examples rely on regular expression matching for pattern detection, which is inherently safe as it treats the input as passive data.
  • [SAFE]: There are no indicators of data exfiltration, hardcoded credentials, or persistence mechanisms. The skill does not attempt to access sensitive file paths or make unauthorized network connections.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 05:21 PM
Security Audit — agent-trust-hub — semantic-bug-detector