A semgrep rule is not code; it does not run anything.