code-security
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation scripts (
install.sh,install.ps1) and agent instructions facilitate the download of thesemgreppackage from the official Python Package Index (PyPI). - [EXTERNAL_DOWNLOADS]: The manual setup instructions fetch the
SKILL.mddefinition from the author's official GitHub repository (KimYx0207/Kim_Service). - [COMMAND_EXECUTION]: The skill invokes the
semgrepcommand-line utility to perform static analysis and security auditing on the project's source code. - [COMMAND_EXECUTION]: The agent is instructed to use
pipfor installing thesemgrepdependency if it is not already present in the execution environment.
Audit Metadata