semgrep-rule-creator
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from official Semgrep resources and established security research sites including semgrep.dev, appsec.guide, and github.com to guide the agent in rule syntax and best practices. These sources are reputable and used strictly for informational purposes.\n- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run 'semgrep --test', which is a standard procedure for validating that detection rules correctly identify target patterns in test files. This execution is limited to the local rule development environment.\n- [PROMPT_INJECTION]: The skill mentions common injection patterns, such as insecure use of eval(), as examples for detection rules. These examples are pedagogical fixtures for static analysis training and do not attempt to override the agent's safety guidelines or system instructions.
Audit Metadata