skills.rest
mejango
mejangoCOMMUNITY
Explore all skills by this author →
𝕏@me_jangoGitHub

semgrep-rule-creator

Generate Semgrep rule YAML files with test cases and documentation.

Updated Jan 17, 2026
Search Tags:#testing#security#static-analysis#semgrep#rule-generation#taint
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill semgrep-rule-creator-mejango
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: semgrep-rule-creator
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/semgrep-rule-creator/skills/semgrep-rule-creator
Command: npx skills add https://github.com/mejango/juicy-vision --skill semgrep-rule-creator-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enables developers to generate production-grade Semgrep rules with robust testing and clear documentation, reducing cycle time from idea to validated rules.

Core Features & Use Cases

  • Generate structured Semgrep rule files (rule YAML + test files) with explicit test scenarios.
  • Support taint-mode and pattern-based rules, including safe and vulnerable case variants.
  • Example: Create a rule to detect hard-coded credentials in a Python project with tests that verify both vulnerable and safe patterns.

Quick Start

Ask the AI to generate a Semgrep rule YAML and a corresponding test file that demonstrates a vulnerability pattern and a safe alternative for a given code scenario.

Frequently Asked Questions about semgrep-rule-creator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate Semgrep rules with test files for security vulnerabilities?▼

You can generate production-grade Semgrep rules with test files by providing a code scenario. The Skill outputs a structured rule YAML and corresponding test files demonstrating both vulnerable and safe pattern variants.

Can I create taint-mode Semgrep rules for tracking data flow across Python and JavaScript?▼

Yes, taint-mode Semgrep rules are supported alongside pattern-based rules. The Skill handles multiple languages including Python, JavaScript, Java, and Go for detecting security vulnerabilities and coding-pattern issues.

What is the best way to validate Semgrep static analysis rules before deploying them?▼

The best way to validate Semgrep rules is through a test-first workflow. This Skill enforces 100% test success by generating explicit test scenarios that verify both vulnerable and safe case variants before output.

Does this Semgrep rule generator work with Java and Go source code?▼

Yes, the Semgrep rule generator works with Java and Go source code, alongside Python and JavaScript. It applies to detecting security vulnerabilities and coding-pattern issues across these supported languages.

Why do my Semgrep rules fail to catch edge cases in static analysis?▼

Semgrep rules may fail without explicit test scenarios for safe and vulnerable variants. This Skill enforces a test-first workflow with 100% test success and external documentation checks to ensure robust rule coverage.

Related Skills

Explore More Software Engineering Skills→
konveyorkonveyor
1

test-generator

Generate compilable test projects that trigger Konveyor analyzer rules.

Official
Advanced
roderikroderik
2

semgrep

Scan codebases with YAML rules to detect security vulnerabilities and quality issues.

Community
Advanced
duanbiao2000duanbiao2000
3

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Advanced
SuperlendSuperlend

semgrep-rule-creator

Generate Semgrep rules with tests and validate via semgrep --test.

Official
Intermediate