codeql-expert
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions for downloading the CodeQL CLI binaries from the official GitHub repository releases.
- Evidence:
wget https://github.com/github/codeql-cli-binaries/releases/latest/download/codeql-linux64.zipin SKILL.md. - [COMMAND_EXECUTION]: The skill provides standard command-line examples for setting up environment variables, cloning repositories, and performing static analysis on local databases.
- Evidence:
git clone https://github.com/github/codeql.git codeql-repoandcodeql database analyzecommands in SKILL.md. - [SAFE]: The skill uses established security tooling and retrieves assets from verified, well-known GitHub organizations without any signs of obfuscation, privilege escalation, or persistence attempts.
Audit Metadata