Catch unsafe code with tested Semgrep rules.
Creates tested custom Semgrep rules that detect security vulnerabilities and unwanted code patterns.
When to use it
Use when writing custom Semgrep rules for bug patterns, security vulnerabilities, data flow issues, or coding standards.
Give it a bug pattern to detect; it creates a tested Semgrep rule and an annotated test file.
What you provide
Requires the Semgrep CLI to validate the rule and run its tests.
This skill
Semgrep documentation
Reads Semgrep documentation
Trail of Bits Testing Handbook
Reads the Semgrep testing handbook