trailofbits/skills semgrep

Checked the catalogued skill at semgrep.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub

F AI-triaged 8

F Security

F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

8 findings

securityhigh SD-007

scripts/run-scans.sh

securityhigh SD-007

scripts/run-scans.sh

securitycritical SD-001

scripts/run-scans.sh

securitycritical SD-001

scripts/run-scans.sh

securitycritical SD-001

scripts/run-scans.sh

securitycritical SD-001

scripts/run-scans.sh

securityhigh SD-007

scripts/run-scans.sh

securityhigh SD-007

scripts/run-scans.sh

1 suppressed by AI triage

securityhigh SD-007 benign_example

scripts/merge_sarif.py

The URL is a static schema reference in JSON output, not an outbound network call executed at runtime.