Scan PHP code with Semgrep CLI and output findings in MCP JSON format.
npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill semgrep-mcp
Please help me install this Agent Skill. Skill: semgrep-mcp Source: https://github.com/yunmengya/PHP_AUDIT_SKILLS/tree/main/semgrep-mcp Command: npx skills add https://github.com/yunmengya/PHP_AUDIT_SKILLS --skill semgrep-mcp
This Skill automates the process of scanning PHP codebases for security vulnerabilities and code quality issues using the Semgrep static analysis tool. It leverages a comprehensive set of rules to identify potential risks and provides normalized output for easier integration into CI/CD pipelines.
r/all), community rules (p/trailofbits), and custom local rules.Use the semgrep-mcp skill to scan the PHP project located at /path/to/your/php_project.
High-intent search queries and answers about installing and using this skill.
Scanning PHP code for security vulnerabilities with Semgrep applies registry and local rules to identify risks like SQL injection and XSS, outputting findings in normalized MCP JSON format for automated workflow integration.
Normalized MCP JSON output is a Machine-Readable Code Pattern format that standardizes Semgrep security findings, facilitating seamless integration of vulnerability detection results into automated development workflows and CI/CD pipelines.
You are not limited to default rules; PHP security scanning supports using default rules (`r/all`), community rules (`p/trailofbits`), and custom local rules, alongside rule synchronization for comprehensive vulnerability detection.
Integrating static analysis into a PHP development workflow automates Semgrep scans during code commits or pull requests, detecting security vulnerabilities and code quality issues before deployment to ensure codebase integrity.
Semgrep static analysis detects common PHP vulnerabilities including SQL injection, Remote Code Execution (RCE), and Cross-Site Scripting (XSS), along with broader code quality issues using curated security rules.
No external dependencies are required to run PHP security checks; the Semgrep scanning Skill operates independently using its internal scripts and assets to execute rule synchronization and vulnerability detection.
iiammaeRun Semgrep static analysis scans to identify security vulnerabilities and bugs.
matteocervelliGenerate project assessment Markdown reports from structured JSON data.
thanh-abaiiMerge pull requests, run CI/CD pipelines, and verify production health.
RazisafirImplement custom Semgrep SAST rules in YAML for vulnerability detection.