KimYx0207KimYx0207Community·1 Agent Skills Included

SkillSemgrep

Natural-language code security scanning and vulnerability detection

Scans codebases for OWASP Top 10 vulnerabilities, hardcoded secrets, and language-specific security flaws using Semgrep. Triggers full audits with plain phrases like "security scan" instead of memorizing complex command-line flags. Delivers structured reports ranked by severity with concrete fix suggestions for each issue.
npx skills add KimYx0207/SkillSemgrep --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install SkillSemgrep?

Run `npx skills add KimYx0207/SkillSemgrep --all -g -y` in your terminal to install the skill globally. The setup also requires Semgrep, which can be installed with pip if missing.

How to scan code for vulnerabilities with plain language?

After installing, just say phrases like "security scan" or "check for leaked secrets" in Claude Code, and the skill runs the right Semgrep rules automatically.

What security issues can SkillSemgrep detect?

It detects OWASP Top 10 vulnerabilities, hardcoded API keys, passwords, and tokens, plus language-specific flaws in Python, JavaScript, TypeScript, and Go.

Does SkillSemgrep work with Claude Code?

Yes. It follows the standard SKILL.md format and loads automatically in Claude Code with hot reloading, no restart needed.

Do I need to know Semgrep commands to use it?

No. The skill picks the correct Semgrep rule sets and commands based on your plain-English request and the project's programming language.

Related Repositories in Software Engineering

View All in Software Engineering