The Agent Skills Directory

[COMMAND_EXECUTION]: The "scripts/agent.py" file uses the "subprocess.run" function to execute the Semgrep CLI. This is the intended core functionality of the skill, enabling it to perform static analysis on a specified target directory. The script uses list-based arguments to prevent shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The documentation references official installation methods for the Semgrep utility via standard package managers and registries, such as pip ("pip install semgrep"), Homebrew, and Docker. These are standard and legitimate installation paths for a well-known security tool.

implementing-semgrep-for-custom-sast-rules