The Agent Skills Directory

[SAFE]: No malicious behavior or attack vectors were identified in the skill instructions or reference files. The eval pattern identified by static analysis is a pedagogical example within a Markdown code block, used to demonstrate insecure coding practices for the Semgrep tool to detect; it is not executable code within the skill itself.
[EXTERNAL_DOWNLOADS]: The skill references official Semgrep documentation and the Trail of Bits testing handbook. These are well-known, trusted resources for security engineering.
[COMMAND_EXECUTION]: The workflow involves using the semgrep CLI for testing and AST analysis, which is the standard and intended use for this tool.
[PROMPT_INJECTION]: The skill handles user requirements for static analysis rules. It incorporates a mandatory validation step (semgrep --test) which acts as a safeguard against generating malformed or non-functional rules.

semgrep-rule-creator