Sponsor

Semgrep Scan

Semgrep security scan with approval gate

View SKILL.md

About

Runs a Semgrep security scan: detects languages, proposes official and third-party rulesets for your explicit approval, runs them in parallel and merges results into SARIF. It uses Semgrep Pro cross-file analysis when available.

Install

Works with Claude Code, Codex

Trust score

58

Scored from what the skill's own files let it do. How it works

  • Bundles scripts
  • Runs shell commands
  • Writes files in your project
  • Uses the network
  • No credentials needed

Runs bundled run-scans.sh and merge_sarif.py, git-clones third-party rule repos and writes results to a static_analysis_semgrep_N folder. Forces --metrics=off so code stays local; needs the Semgrep CLI installed.

Reviewed from source on Oct 15, 2026. Read the files yourself before installing.

More Security skills

All skills