codeql
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses bash scripts to automate the CodeQL lifecycle, including database initialization, build tracing for compiled languages, and analysis execution. These commands are necessary for the tool's core functionality and are executed based on project-specific configurations.- [EXTERNAL_DOWNLOADS]: The skill manages the download of CodeQL query packs from reputable organizations such as GitHub Security Lab and Trail of Bits. It also installs target project dependencies using standard package managers (npm, pip, maven) during the database build phase to ensure complete extraction.- [SAFE]: No malicious patterns such as credential exfiltration, unauthorized persistence, or deceptive prompt injections were detected. The skill maintains transparency through extensive logging and uses interactive user questions for significant decisions like database selection and scan mode.
Audit Metadata