Run Semgrep security scans to identify vulnerabilities and secrets leakage.
npx skills add https://github.com/KimYx0207/SkillSemgrep --skill code-security-kimyx0207
Please help me install this Agent Skill. Skill: code-security Source: https://github.com/KimYx0207/SkillSemgrep/tree/main Command: npx skills add https://github.com/KimYx0207/SkillSemgrep --skill code-security-kimyx0207
Automate code security audits by running Semgrep scans inside Claude Code to identify vulnerabilities and secrets leakage, reducing manual review time.
在 Claude Code 中说“安全扫描当前项目”即可立即开始全量安全扫描。
High-intent search queries and answers about installing and using this skill.
To run a Semgrep security scan, trigger the automation inside Claude Code by saying "安全扫描当前项目". It scans the current project to identify vulnerabilities and secrets leakage, producing structured reports with risk classifications and remediation guidance.
Yes, Semgrep code scanning supports multiple programming languages including Python, JavaScript/TypeScript, and Go. It applies rule configurations like p/python, p/javascript, and p/golang to detect language-specific vulnerabilities across projects of varying sizes.
Yes, you can detect leaked API keys and credentials using the p/secrets rule configuration during automated code scanning. It identifies secrets leakage across your codebase and includes findings in structured security audit reports.
You need Semgrep installed in your environment to run automated security audits inside Claude Code. Once installed, trigger a natural language command like "安全扫描当前项目" to start full project scanning for OWASP Top 10 issues and secrets.
The best way to automate OWASP Top 10 vulnerability detection is using the p/security-audit rule configuration with Semgrep. It performs full project scanning to identify common security issues and outputs structured reports with clear risk classifications and remediation steps.
Semgrep code scanning requires the tool to be pre-installed and relies on predefined rule configurations like auto, p/security-audit, or language-specific rules. It focuses on static analysis for vulnerability and secrets detection, meaning it cannot identify runtime security issues.
rohunjAutomate Semgrep SAST scans to identify security vulnerabilities across codebases.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
mcj-coderConfigure SAST tools, secrets detection, and vulnerability thresholds for CI pipelines.
