sast-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as an instructional guide and configuration repository for implementing Static Application Security Testing (SAST) using industry-standard tools.- [EXTERNAL_DOWNLOADS]: Provides instructions to install the Semgrep package from PyPI and the official CodeQL extension for the GitHub CLI. These downloads originate from well-known and trusted sources in the security community.- [COMMAND_EXECUTION]: Contains example shell commands for running Docker containers, installing packages via pip, and executing security analysis workflows. These commands are consistent with the skill's stated purpose of security scanning.- [SAFE]: References to external GitHub repositories and actions (e.g., returntocorp/semgrep-action) point to official resources maintained by established security vendors.
Audit Metadata