Download

Skill UI

Browse and discover 10667+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Semgrep , found 12 results

Default Newest Most Downloaded

AI-Powered Code Review Specialist

performance-testing-review-ai-review

sickn33/antigravity-awesome-skills

A comprehensive specialist that combines automated static analysis (SonarQube, CodeQL, Semgrep) with advanced AI capabilities. This tool performs multi-layered code reviews assessing security vulnerabilities, performance bottlenecks, architectural coherence, and maintainability across various programming languages, integrating seamlessly into CI/CD pipelines.

SARIF Parsing Assistant

trailofbits/skills

Parses SARIF files from scanners like CodeQL or Semgrep, offering filtering, deduplication, format conversion, and CI/CD integration without running scans itself.

SAST Tool Setup and Configuration Guide

sast-configuration

sickn33/antigravity-awesome-skills

Provides comprehensive guidance for setting up and configuring Static Application Security Testing (SAST) tools, including Semgrep, SonarQube, and CodeQL. Learn how to integrate security scanning into CI/CD pipelines, define custom security rules, enforce quality gates, and manage compliance policies to proactively identify and remediate code vulnerabilities across multiple programming languages.

Semgrep Security Scan

trailofbits/skills

Runs Semgrep static analysis with auto language detection, parallel Task subagents, Semgrep Pro checks, and configurable “run all” or “important only” modes to audit codebases for vulnerabilities and bug patterns.

Semgrep Rule Creator

semgrep-rule-creator

trailofbits/skills

Guides you through building custom Semgrep rules with a testing-first workflow, AST analysis, and taint-mode preference to catch vulnerabilities or bug patterns while steering clear of overly broad or unverified shortcuts.

Semgrep Rule Porting

semgrep-rule-variant-creator

trailofbits/skills

Ports an existing Semgrep rule into each requested language by running applicability analysis, test-first creation, AST-informed rule translation, and validation so that every target-language variant has its own rule+test directory.

Bug Variant Hunter

variant-analysis

trailofbits/skills

Performs pattern-driven searches for similar vulnerabilities across repositories after a known issue is found, guiding analysts through precise generalization, triage, and tool choices (ripgrep, Semgrep, CodeQL) to audit and prioritize true positives.

Semgrep Rule Creator for Static Analysis

semgrep-rule-creator

sickn33/antigravity-awesome-skills

This skill provides a comprehensive guide for creating production-quality custom Semgrep rules. It teaches best practices for detecting security vulnerabilities, enforcing robust coding standards, and identifying specific bug patterns. By emphasizing a test-first approach and utilizing advanced techniques like taint mode, users can write highly accurate static analysis rules that drastically reduce false positives.

Porting Security Rules Across Languages

semgrep-rule-variant-creator

sickn33/antigravity-awesome-skills

This skill provides a structured workflow for porting existing Semgrep security rules to multiple target languages. It guides users through applicability analysis, test-first rule creation, and validation for each language variant, ensuring consistent and accurate security coverage across polyglot codebases.

Codebase Vulnerability Variant Analysis

variant-analysis

sickn33/antigravity-awesome-skills

A systematic skill for identifying similar vulnerabilities and bugs across large, complex codebases. It guides the user through generalizing initial bug patterns using techniques like CodeQL and Semgrep, ensuring comprehensive security audits beyond the initially discovered flaw. Ideal for advanced security research and robust code auditing.

Writing Custom SAST Rules With Semgrep

implementing-semgrep-for-custom-sast-rules

mukul975/Anthropic-Cybersecurity-Skills

Semgrep is an open-source static analysis tool used to find bugs, detect vulnerabilities, and enforce coding standards. This guide covers writing custom rules in YAML format to implement advanced SAST checks, such as detecting SQL injection, hardcoded secrets, or tracking tainted user input. It is essential for building robust DevSecOps pipelines and ensuring compliance.

Integrating SAST into CI/CD Pipelines

integrating-sast-into-github-actions-pipeline

mukul975/Anthropic-Cybersecurity-Skills

This skill guides developers through integrating Static Application Security Testing (SAST) tools like CodeQL and Semgrep into GitHub Actions CI/CD pipelines. It covers automating code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results, and establishing quality gates to prevent vulnerable code from merging into production.

1

Language