codeql
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements CodeQL scanning which is a security-enhancing activity. The provided instructions and scripts follow best practices for database creation and query execution.
- [COMMAND_EXECUTION]: The skill executes build commands such as
make,cmake,gradlew,mvn,cargo, anddotnetalong with CodeQL CLI commands. These are necessary and expected for the skill's primary purpose of building and analyzing code databases. - [EXTERNAL_DOWNLOADS]: The skill references official CodeQL repositories and well-known services like Homebrew and the GitHub CLI for tool installation, which are considered trusted sources.
- [SAFE]: The skill includes robust quality gate scripts (
check_db_quality.pyandverify_query_suite.py) that validate the integrity and quality of the generated CodeQL database before proceeding with analysis.
Audit Metadata