Scan codebases for structural patterns and security vulnerabilities using YAML rules.
npx skills add https://github.com/opengrep/skills --skill opengrep
Please help me install this Agent Skill. Skill: opengrep Source: https://github.com/opengrep/skills/tree/main/skills/opengrep Command: npx skills add https://github.com/opengrep/skills --skill opengrep
Run Opengrep for pattern-based code search and security scanning. Use when grep is insufficient for finding code patterns that require structural understanding (function calls, data flow, nested structures). Also use for security vulnerability detection with custom YAML rules.
Run opengrep to scan your codebase with a default rule set and discover structural patterns and security issues.
High-intent search queries and answers about installing and using this skill.
Structural code pattern matching requires semantic understanding of function calls, data flow, and nested structures, rather than relying on text grep. Opengrep performs semantic code search to find structural patterns and reduce false positives in multi-language repositories.
Security vulnerability detection with custom YAML rules is executed by running Opengrep to scan your codebase. It uses configurable YAML rule sets and supports taint analysis to identify vulnerabilities across multiple programming languages.
Semgrep rule syntax compatibility is supported by Opengrep, allowing you to reuse existing custom YAML rules and CLI workflows. This enables easy rule reuse and consistent static-analysis security scanning across different projects.
Taint analysis is applicable to multi-language repositories using Opengrep. It scans for security vulnerabilities and traces data flow structurally across different programming languages within the same codebase.
The best way to reduce false positives during code search is using semantic pattern matching instead of text grep. Opengrep understands code structure and nested data flow, providing accurate structural code pattern results.
roderikReview Solidity smart contracts for security vulnerabilities using Foundry.
jeremylongshoreScan codebases, dependencies, and configurations for security vulnerabilities and CVEs.
emilneuraz-aiConfigure Semgrep, SonarQube, and CodeQL security scanning in CI/CD pipelines.
parcadeiRoute search queries to the most token-efficient tool by query type.
