sast-flawfinder
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
flawfinderusing the standard Python package manager (pip). Flawfinder is a widely recognized and trusted open-source tool for C/C++ security analysis. - [COMMAND_EXECUTION]: The skill uses shell commands to execute the SAST scanner on local source code files. These commands are necessary for the skill's stated purpose and do not include any suspicious flags or redirections to untrusted external locations.
Audit Metadata