semgrep
trailofbits7.8k installs
Find security flaws in your code with Semgrep.
What it does
Finds potential security flaws in a codebase using approved Semgrep rulesets and produces consolidated scan results.
When to use it
Use for security audits, vulnerability checks before code review, known bug patterns, or first-pass static analysis.
How to use it
Give it a codebase; it asks you to approve the exact scan plan before running scans and saving consolidated results.
What you provide
- An existing project
Uses
Latest review
What you need · 5
Requires the Semgrep CLI to run security scans.
Requires jq; the scan runner stops if it is unavailable.
Access · 2
This skill
Semgrep Registry
Read
Fetches Semgrep security rules
GitHub
Read
Downloads third-party security rules