codeql
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference guide for CodeQL configuration via GitHub Actions and the CodeQL CLI.
- [EXTERNAL_DOWNLOADS]: The skill mentions downloading the CodeQL bundle from 'github.com/github/codeql-action/releases'. As this is the official repository for the CodeQL toolchain by the vendor (GitHub), this is a standard and safe operation.
- [COMMAND_EXECUTION]: The documentation provides standard CLI commands for CodeQL (e.g., 'codeql database create', 'codeql database analyze'). These are legitimate development tools and are documented for educational purposes.
- [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration examples. It does not include any scripts, binaries, or automated execution logic that could pose a security risk.
Audit Metadata