sast-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for setting up well-known security tools including Semgrep, SonarQube, and CodeQL using official documentation and recognized software repositories.
- [SAFE]: Installation commands utilize standard package managers and official extensions, such as the GitHub CLI and pip, to fetch reputable tools.
- [SAFE]: Integration examples for CI/CD pipelines and pre-commit hooks refer to official organizations and verified repositories for the mentioned security tools.
Audit Metadata