semgrep-solidity

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the semgrep tool via official package managers (pip, brew) and cloning the decurity/semgrep-smart-contracts repository. These are standard, well-known resources in the smart contract security ecosystem.
  • [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for local development and CI/CD workflows, including semgrep, git, pip, and make. These are all standard utilities used as intended for the skill's purpose of security auditing.
  • [REMOTE_CODE_EXECUTION]: The documentation mentions running Semgrep rules directly from the official registry (semgrep --config "r/solidity"). This is a well-known service provided by Semgrep Inc. for community rule distribution.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 12:31 AM
Security Audit — agent-trust-hub — semgrep-solidity