skills/mukul975/anthropic-cybersecurity-skills/implementing-semgrep-for-custom-sast-rules/Gen Agent Trust Hub
implementing-semgrep-for-custom-sast-rules
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The skill provides legitimate static analysis rule templates and a utility script for auditing security service endpoints.
- [EXTERNAL_DOWNLOADS]: The documentation references standard installation procedures for 'semgrep' (a well-known static analysis tool) and the 'requests' Python library. These are reputable packages from trusted sources.
- [COMMAND_EXECUTION]: The skill includes standard CLI commands for installing and running Semgrep, as well as executing the provided audit script. These commands are consistent with the skill's primary purpose of secure development and code scanning.
- [DATA_EXFILTRATION]: The audit script (scripts/agent.py) is designed to handle API tokens and communicate with user-defined target URLs. Analysis confirms these are correctly implemented as functional requirements for auditing and do not involve hardcoded credentials or unauthorized data transmission.
Audit Metadata