semgrepby Trail of BitsDevelopmentGitHub stars: 7.3k
Semgrep skill: what it does and how to install it
Runs a Semgrep security scan: detects languages, selects rulesets, asks for approval, then runs the scans.
Install
$ npx skills add trailofbits/skills --skill semgrepRun it in a terminal. If your agent is already running, start a new session so it picks the skill up.
About this skill
Runs a Semgrep security scan: detects languages, selects rulesets, asks for approval, then runs the scans.
Similar skills
- Improve Codebase ArchitectureScans a codebase for chances to deepen modules, shows them in an HTML report, then interviews you about the one you pick.
- Constant Time AnalysisDetects timing side-channel vulnerabilities in cryptographic code written in C, C++, Go and other languages.
- Semgrep Rule CreatorCreates custom Semgrep rules that detect security vulnerabilities and bug patterns.