codeql
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is dedicated to security analysis and follows industry best practices for .NET development. It relies exclusively on official tools and actions from trusted organizations.
- [COMMAND_EXECUTION]: The skill utilizes legitimate commands such as
dotnet build,msbuild,rg(ripgrep), and thecodeqlCLI to analyze codebases. These operations are standard for the intended use case and are used to inspect repository state and compile code for analysis. - [EXTERNAL_DOWNLOADS]: All external resources, including GitHub Actions (
github/codeql-action) and CodeQL query packs (codeql/csharp-queries), are sourced from official and trusted GitHub repositories and registries. - [INDIRECT_PROMPT_INJECTION]: While the skill processes repository content (such as
AGENTS.mdand workflow files), it does so to configure security tooling. It does not expose dangerous capabilities to untrusted data in a way that bypasses safety guardrails.
Audit Metadata