sast-configuration
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for setting up and configuring standard security scanning tools (Semgrep, SonarQube, and CodeQL). The instructions align with industry best practices for DevSecOps.
- [EXTERNAL_DOWNLOADS]: The skill references installation commands and CI/CD integrations for well-known security platforms. Downloads from these official and reputable sources (e.g., GitHub extensions, Semgrep's official registry) are appropriate for the skill's stated purpose.
- [COMMAND_EXECUTION]: Shell commands provided in the documentation are restricted to standard tool installation (pip, gh extension) and typical execution patterns. No suspicious command injection or privilege escalation patterns were detected.
Audit Metadata