Agent skill
semgrep-security
Semgrep code security scanning and SAST analysis
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/semgrep-security
SKILL.md
Semgrep Security Skill
Overview
Static Application Security Testing (SAST) with Semgrep. 90%+ context savings.
Requirements
- Semgrep CLI installed
- Optional: SEMGREP_APP_TOKEN for cloud features
Tools (Progressive Disclosure)
Scanning
| Tool | Description |
|---|---|
| scan | Run security scan |
| scan-ci | CI-optimized scan |
| scan-diff | Scan only changed files |
Rules
| Tool | Description |
|---|---|
| list-rules | List available rules |
| rule-info | Get rule details |
| test-rule | Test custom rule |
Results
| Tool | Description |
|---|---|
| findings | List scan findings |
| sarif-export | Export SARIF format |
| json-export | Export JSON format |
Severity Categories
- ERROR: Critical security issues
- WARNING: Medium severity
- INFO: Low severity/best practices
Agent Integration
- security-architect (primary): Security review
- qa (primary): Quality gates
- code-reviewer (secondary): PR scanning
Common Rulesets
- p/default (general security)
- p/owasp-top-ten
- p/javascript
- p/typescript
- p/python
- p/secrets (credential detection)
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?