SkillSemgrep
Natural-language code security scanning and vulnerability detection
All Skills in This Repository (1)
Pure Emerald Level IndicatorsFrequently Asked Questions
FAQPage SchemaHow to install SkillSemgrep?▼
Run `npx skills add KimYx0207/SkillSemgrep --all -g -y` in your terminal to install the skill globally. The setup also requires Semgrep, which can be installed with pip if missing.
How to scan code for vulnerabilities with plain language?▼
After installing, just say phrases like "security scan" or "check for leaked secrets" in Claude Code, and the skill runs the right Semgrep rules automatically.
What security issues can SkillSemgrep detect?▼
It detects OWASP Top 10 vulnerabilities, hardcoded API keys, passwords, and tokens, plus language-specific flaws in Python, JavaScript, TypeScript, and Go.
Does SkillSemgrep work with Claude Code?▼
Yes. It follows the standard SKILL.md format and loads automatically in Claude Code with hot reloading, no restart needed.
Do I need to know Semgrep commands to use it?▼
No. The skill picks the correct Semgrep rule sets and commands based on your plain-English request and the project's programming language.
Related Repositories in Software Engineering
View All in Software Engineering→openclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core