semgrep
Skill by nakaj1214 · updated · ★ 0
並列サブエージェントを使用してコードベースに Semgrep 静的解析スキャンを実行する。 利用可能な場合は自動的に Semgrep Pro を検出しクロスファイル解析に使用する。 脆弱性スキャン、Semgrep によるセキュリティ監査、バグ検出、静的解析の依頼時に使用する。 多言語コードベースとトリアージ用に並列ワーカーを起動する。 semgrep is published by nakaj1214 on GitHub.
Last commit 222 days ago
No licence found, so reuse rights are unclear
Clear description, installs from GitHub, original repository
Not checked yet. What we check
Install semgrep
Built from the published package, never by AIgit clone --depth 1 https://github.com/nakaj1214/nakaj_claude /tmp/nakaj_claude && mkdir -p ~/.claude/skills && cp -r /tmp/nakaj_claude/.claude/docs/references/advanced-security/semgrep ~/.claude/skills/semgrepRun in your terminal. Claude Code loads skills from ~/.claude/skills automatically.
git clone --depth 1 https://github.com/nakaj1214/nakaj_claude /tmp/nakaj_claude && mkdir -p ~/.gemini/antigravity-cli/skills && cp -r /tmp/nakaj_claude/.claude/docs/references/advanced-security/semgrep ~/.gemini/antigravity-cli/skills/semgrepAntigravity CLI loads skills from ~/.gemini/antigravity-cli/skills, or .agents/skills for one project.
Skills can run scripts on your machine. Some need an API key: check the README.
Alternatives to semgrep
All alternatives →Use when reviewing MobileBuildMCP rendering, streaming fragment, next-step, and CLI output mode changes for boundary violations.
Version bumping, release workflow, and PyPI publishing process for Visdom
Scan recent merges and commits since last release for changelog content.
Import Shade from layer-specific subpaths (primitives, components, patterns, page-templates, utils), never the root barrel. Trigger when editing TSX/TS in Shade-consuming apps.
Create a PR in which all dependencies are updated to their latest versions and CI is passing. Only user initiated.
Follow code2prompt architecture and implementation conventions when changing or reviewing code.
semgrep: common questions
How do I install semgrep?
Run the command above to copy the skill into ~/.claude/skills/. Claude Code picks it up automatically.
Is semgrep free?
The code is public, but no licence file was found, so check the repository before commercial use.
Is semgrep safe to use?
It scores 15 of 100. Grades: maintenance D, licence F, quality C. The security check has not run for it yet. Review the code before you install. How grades work.
What are alternatives to semgrep?
Similar skills: mobilebuildmcp-rendering-streaming-review, release-process, changelog-scan, Shade imports.
