codeql
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands (e.g.,
mkdir,find,grep,awk,jq,unzip,wc) and thecodeqlbinary to manage analysis workflows. These commands are used for legitimate purposes such as directory creation, database metadata extraction, and result processing. Execution is restricted to the local environment and the analysis output directory. - [EXTERNAL_DOWNLOADS]: The skill mentions the discovery and installation of CodeQL query packs from external sources like Trail of Bits and the community. This is a standard functional requirement for CodeQL to acquire the necessary security queries for analysis.
- [DATA_EXFILTRATION]: While the skill processes codebase data and generates security findings in SARIF format, all generated artifacts (logs, databases, results) are stored within a locally resolved
OUTPUT_DIR. No unauthorized network operations or data transmission to external domains were detected.
Audit Metadata