Scan source code for security and quality issues with Semgrep.
npx skills add https://github.com/marduk191/qwen3_mcp --skill semgrep-marduk191
Please help me install this Agent Skill. Skill: semgrep Source: https://github.com/marduk191/qwen3_mcp/tree/main/skills/static-analysis/skills/semgrep Command: npx skills add https://github.com/marduk191/qwen3_mcp --skill semgrep-marduk191
Semgrep provides fast, rule-based static analysis to detect security vulnerabilities and quality issues in source code across languages.
Install Semgrep and run a quick scan on your codebase to see vulnerabilities and quality issues.
High-intent search queries and answers about installing and using this skill.
Static analysis scanning detects security vulnerabilities across multiple languages using pattern-matching and taint mode. It identifies bugs and quality issues by applying configurable YAML rules to single files or entire repositories.
Taint mode in static analysis improves bug detection by tracking untrusted data flows through your source code. This mechanism enables more precise identification of vulnerabilities where malicious input reaches sensitive functions.
You can run custom YAML rules for code review directly in CI/CD pipelines. Configurable rulesets support automated security checks, applying pattern-based scanning to catch common vulnerability patterns during continuous integration workflows.
Static analysis integration requires either Python/pip or Docker installation to run. Once installed, you can easily apply these config-driven scans to your local development environment for quick security checks.
The best way to configure rulesets for repository-wide code review is defining custom rules in YAML. This config-driven approach applies pattern-based scanning across your entire codebase, outputting results in various formats for automated security checks.
Pattern-matching static analysis provides fast, rule-based detection of security vulnerabilities without complex compilation. Unlike heavier approaches, it quickly scans source code across languages using configurable YAML rules to catch common vulnerability patterns.
flashinfer-aiClone and update SGLang and FlashInfer repositories with submodules from GitHub.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
mscipioScans codebases for vulnerabilities, secrets, and unsafe patterns via static analysis.
roderikIdentify security vulnerabilities in source code using CodeQL static analysis.
