skills.rest
lidge-jun
lidge-junCOMMUNITY
Explore all skills by this author →
𝕏@claudeebumGitHub

semgrep

Execute Semgrep static analysis scans to detect vulnerabilities and code quality issues.

5|Updated Feb 26, 2026
Search Tags:#code quality#static analysis#code audit#security scanning#vulnerability detection#semgrep
One-click install
npx skills add https://github.com/lidge-jun/cli-jaw-skills --skill semgrep-lidge-jun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: semgrep
Source: https://github.com/lidge-jun/cli-jaw-skills/tree/main/static-analysis/skills/semgrep
Command: npx skills add https://github.com/lidge-jun/cli-jaw-skills --skill semgrep-lidge-jun

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of scanning codebases for security vulnerabilities, bugs, and code quality issues using the Semgrep static analysis tool.

Core Features & Use Cases

  • Automated Security Audits: Run comprehensive security scans on your codebase.
  • Vulnerability Detection: Identify known bug patterns and potential security flaws.
  • Multi-Language Support: Detects and scans code across various programming languages.
  • Parallel Execution: Utilizes parallel subagents for efficient scanning of large codebases.
  • Use Case: You need to perform a security audit on a new Python and JavaScript project before deploying it. This Skill will automatically detect the languages, select appropriate rulesets, and run Semgrep scans to find potential issues.

Quick Start

Use the semgrep skill to scan the current directory for security vulnerabilities.

Frequently Asked Questions about semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities automatically?▼

To scan your codebase for security vulnerabilities automatically, this Skill executes Semgrep static analysis to detect bugs and security flaws. It automatically identifies programming languages and applies configurable rulesets to find issues.

What is static analysis and how does it detect code vulnerabilities?▼

Static analysis detects code vulnerabilities by scanning source code patterns without executing the program. This Skill uses Semgrep rulesets to identify known bug patterns, security flaws, and code quality issues across multiple programming languages.

Can I run static analysis across multiple programming languages at once?▼

Yes, you can run static analysis across multiple programming languages at once. The Skill features automatic language detection, selecting appropriate rulesets to scan mixed-language codebases like Python and JavaScript projects.

What is the best way to scan a large codebase for security flaws?▼

The best way to scan a large codebase for security flaws is using parallel execution. This Skill utilizes parallel subagents to efficiently run Semgrep static analysis scans across large codebases.

Does Semgrep support cross-file analysis for vulnerability detection?▼

Yes, Semgrep supports cross-file analysis for vulnerability detection through Semgrep Pro. This allows the static analysis scan to track data flow and identify vulnerabilities spanning multiple files.

Do I need to approve security scans before they execute?▼

Yes, you need to approve security scans before they execute. The Skill requires user approval prior to running Semgrep static analysis scans on your codebase to detect vulnerabilities and code quality issues.

Related Skills

Explore More Software Engineering Skills→
allanninalallanninal
1

semgrep

Scan codebases for security vulnerabilities and coding standards with Semgrep.

Community
Intermediate
devstefanchodevstefancho
11

code-quality-reviewer

Identify and remediate code quality issues using DRY, KISS, and CLEAN CODE principles.

Community
Advanced
duanbiao2000duanbiao2000
3

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Advanced
keremtoker468-dotcomkeremtoker468-dotcom

semgrep

Run Semgrep static analysis to detect vulnerabilities and code quality issues.

Community
Advanced