semgrep-rule-variant-creator
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill ingests untrusted Semgrep rules in YAML format and processes them without boundary markers or safety instructions. A maliciously crafted rule could attempt to override the agent's logic during the rule-porting cycle.
- Ingestion points: Input field for 'Existing Semgrep rule' (YAML content).
- Boundary markers: Absent.
- Capability inventory: Shell command execution via the semgrep CLI tool.
- Sanitization: Absent; the agent is not instructed to validate or escape the input rule content before processing.
- [COMMAND_EXECUTION]: Shell Command Injection Surface. The workflow guides the agent to construct and execute semgrep commands using placeholders like '' and 'test-file'. If the agent fails to sanitize these inputs (e.g., if a user provides a language name like 'go; rm -rf /'), it could lead to command injection on the host system.
Audit Metadata