Semgrep
Runs and guides Semgrep code scans and triages the results. Some features are optional paid extras.
How to use it
Install it with the open Skills CLI (needs Node.js), then restart your agent:
npx skills add trailofbits/skills --skill semgrep- Download the ZIP from this page and unzip it.
- Put the
semgrepfolder in.claude/skills/inside your project (or~/.claude/skills/for all projects). - Restart Claude Code and call it with
/semgrep.
بالعربي
يشغل ويوجه فحص الكود بقواعد Semgrep ويحلل النتائج؛ بعض القدرات اختيارية ومدفوعة ولا توفرها المهارة بنفسها.
More for security
- /security-review (built into Claude Code): Runs a full security review of the pending changes on your branch.
- Security Review: Reviews auth, input handling, secrets and APIs before release, using a practical security checklist.
- Audit Context Building: Builds a precise picture of code flow, assumptions and dependencies before a security audit, so findings have context.