semgrep

17 mods across 5 repositories, 17k stars between them.

semgrep AGENTS.md

01

semgrep/semgrep

Instructions file CodexOpenCode

AGENTS.md instructions for semgrep/semgrep, covering semgrep oss codebase overview, architecture, key concepts, python-to-ocaml migration strategy and developer setup.

16k 4d ago A 1,923 tokens LGPL-2.1

semgrep CLAUDE.md

02

semgrep/semgrep

Instructions file

Claude Code instructions for semgrep/semgrep, a project described as: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

16k 4d ago A 5 tokens LGPL-2.1

skills AGENTS.md

03

semgrep/skills

Instructions file CodexOpenCode

AGENTS.md instructions for semgrep/skills, covering agents.md, repository overview, skill types in this repo, guideline skills (code-security, llm-security) and reference skills (semgrep).

289 1mo ago A 1,017 tokens

skills CLAUDE.md

04

semgrep/skills

Instructions file

Claude Code instructions for semgrep/skills, a project described as: A collection of skills for AI coding agents from Semgrep.

289 1mo ago A 3 tokens

code-security

05

semgrep/skills

Skill Claude CodeCodex

Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for SQL injection' or 'review security'. IMPORTANT: Always consult this skill when writing or reviewing any code that handles user input, authentication, file…

289 1mo ago A 116 tokens

llm-security

06

semgrep/skills

Skill Claude CodeCodex

Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025. Use when building LLM apps, reviewing AI security, implementing RAG systems, or asking about LLM vulnerabilities like 'prompt injection' or 'check LLM security'. IMPORTANT: Always consult this skill when building chatbots, AI agents, RAG…

289 1mo ago A 145 tokens

semgrep

07

semgrep/skills

Skill Claude CodeCodex

Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns. IMPORTANT: Also use this skill when users ask to 'scan for bugs', 'check code quality', 'find vulnerabilities', 'static…

289 1mo ago A 112 tokens

semgrep

09

semgrep/guardian

Plugin Claude Code

Semgrep Guardian: Scans agent-generated code for security vulnerabilities.

12 5d ago A tokens not measured

guardian

10

semgrep/guardian

MCP server Claude CodeCodexCursor +2

MCP server "guardian" as configured in semgrep/guardian. Launched with ${CLAUDE_PLUGIN_ROOT}/scripts/hook claude mcp.

12 5d ago A tokens not measured

PreToolUse

11

semgrep/guardian

Hook

Runs before the agent uses a tool for Write, Edit and Bash tool calls, running an inline shell check. From semgrep/guardian.

12 5d ago A tokens not measured

PostToolUse

12

semgrep/guardian

Hook

Runs after a tool call finishes for Write, Edit and Bash tool calls, running an inline shell check. From semgrep/guardian.

12 5d ago A tokens not measured

SessionStart

13

semgrep/guardian

Hook

Runs when a session starts on startup, resume, clear and compact, running an inline shell check. From semgrep/guardian.

12 5d ago A tokens not measured

SessionEnd

14

semgrep/guardian

Hook

Runs when a session ends for clear, resume, logout, prompt_input_exit, bypass_permissions_disabled and other tool calls, running an inline shell check. From semgrep/guardian.

12 5d ago A tokens not measured

install-mfw

15

semgrep/guardian

Skill Claude CodeCodex

Install the mfw (Semgrep Malware Firewall) CLI via the curl|sh installer and walk the user through setup — trust store, PATH shims, shell integration, and the background daemon — asking questions at real decision points. Detects when the user's shell rc files are managed (symlinked into nix / home-manager / chezmoi /…

12 5d ago B 129 tokens

semgrep

16

semgrep/cursor-plugin

MCP server Claude CodeCodexCursor

MCP server "semgrep" as configured in semgrep/cursor-plugin. Launched with semgrep mcp.

1 1mo ago A tokens not measured