skills
Secure coding rules, LLM security checks, and Semgrep scanning
All Skills in This Repository (3)
Pure Emerald Level Indicators
semgrepsemgrep
Run Semgrep scans and write custom YAML rules to detect security vulnerabilities.
semgrepcode-security
Provide security guidelines for writing secure code and auditing vulnerabilities.
semgrepllm-security
Organize LLM application security guidelines for building, reviewing, and deploying AI systems.
Frequently Asked Questions
FAQPage SchemaHow to install semgrep/skills?▼
Run `npx skills add semgrep/skills --all -g -y` in your terminal to install all three security skills globally.
How to check code for security vulnerabilities?▼
The code-security skill automatically reviews code for SQL injection, XSS, hardcoded secrets, and 25+ other vulnerability categories across 15+ languages.
How to secure an LLM application?▼
The llm-security skill applies the OWASP LLM Top 10 to your chatbots, RAG systems, and AI agents, flagging risks like prompt injection and data leakage with secure code examples.
Can I create custom Semgrep rules with this?▼
Yes. The semgrep skill guides your agent through writing, testing, and validating custom YAML detection rules, including taint-mode rules for data flow analysis.
Do these skills work with Claude Code and Cursor?▼
Yes. All skills follow the universal SKILL.md standard and activate automatically in Claude Code, Cursor, and other compatible coding agents when relevant tasks are detected.
Related Repositories in Software Engineering
View All in Software Engineering→
openclawopenclaw
Run a personal AI assistant across your devices and chat apps
obrasuperpowers
Gives coding agents a disciplined workflow from idea to merged code
facebookreact
AI agent skills for building, testing, and porting React core