Agent skill
semgrep-scan
Run Semgrep SAST analysis for security and code quality
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/semgrep-scan
SKILL.md
Semgrep SAST Scan
Run static application security testing with Semgrep.
What To Do
-
Install:
pip install semgreporbrew install semgrep -
Run scan:
bashsemgrep scan --config=auto --json --output=semgrep-report.json -
Custom rules for .NET:
bashsemgrep scan --config=p/csharp --config=p/owasp-top-ten --config=p/jwt -
CI Integration:
yaml- script: semgrep scan --config=auto --error --json -o semgrep.json displayName: "SAST Scan" -
Interpret results: Fix HIGH/ERROR severity first. Use
--severity=errorto filter.
Arguments
--config=<ruleset>: Semgrep config (auto, p/csharp, p/owasp-top-ten)--severity=<level>: Filter by severity (info, warning, error)
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?