semgrep-rule-creator
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for creating Semgrep rules, emphasizing best practices like test-first development and the use of taint mode for data-flow vulnerabilities.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation from well-known sources including semgrep.dev and GitHub to ensure the agent has up-to-date information on rule syntax and patterns.
- [COMMAND_EXECUTION]: The skill includes instructions to run the
semgrepCLI locally using the--testflag. This is a standard and expected operation for validating the accuracy of the rules being created.
Audit Metadata