semgrep-solidity
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the
semgreptool via official package managers (pip,brew) and cloning thedecurity/semgrep-smart-contractsrepository. These are standard, well-known resources in the smart contract security ecosystem. - [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands for local development and CI/CD workflows, including
semgrep,git,pip, andmake. These are all standard utilities used as intended for the skill's purpose of security auditing. - [REMOTE_CODE_EXECUTION]: The documentation mentions running Semgrep rules directly from the official registry (
semgrep --config "r/solidity"). This is a well-known service provided by Semgrep Inc. for community rule distribution.
Audit Metadata