Codify vulnerability patterns into Semgrep rules for automated code scanning.
npx skills add https://github.com/ashwnn/agent-config --skill semgrep-rules
Please help me install this Agent Skill. Skill: semgrep-rules Source: https://github.com/ashwnn/agent-config/tree/main/skills/semgrep-rules Command: npx skills add https://github.com/ashwnn/agent-config --skill semgrep-rules
Create and refine custom Semgrep rules for detecting vulnerability patterns or coding anti-patterns in your codebase. Use when you've found a bug class you want to detect systematically, or when preparing automated security checks for CI.
Write a Semgrep rule that detects unsanitized user input used in SQL queries.
High-intent search queries and answers about installing and using this skill.
To create custom Semgrep rules for vulnerability detection, you codify vulnerability patterns using structured fields like id, patterns, message, languages, severity, and metadata to systematically identify issues in your codebase.
You can automate static analysis security checks in a CI pipeline by codifying bug classes into Semgrep rules with inline tests and examples, enabling automated code scanning and regression detection during integration.
Yes, you can use Semgrep rules across multi-language codebases by specifying the target programming languages in the rule's language field, allowing the static analysis to apply scanning patterns to different code environments.
You write a Semgrep rule to detect unsanitized SQL input by defining matching patterns that trace user input variables flowing into SQL query execution functions, then assigning a severity level and descriptive message.
Yes, this approach to writing Semgrep rules supports inline tests and examples, providing a structured rule-writing workflow that validates pattern accuracy and ensures reliable vulnerability detection before deploying to CI.
daltonkyemillerEnforce coding style, patterns, and anti-patterns using static analysis tools.
AgentSecOpsRun Semgrep SAST scans to detect security flaws and map findings to OWASP and CWE standards.
balic-AI-ML-R-D-ResourcesAutomate security-focused code analysis with Semgrep across CI/CD pipelines.
TECHKNOWMAD-LABSScan code repositories for vulnerabilities and leaked secrets using static analysis tools.
