🛡️ Semgrep
Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns.
npx playbooks add skill semgrep/skills --skill semgrep
About Semgrep
Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns.
At 30 words, this compact prompt gives your agent specialized security expertise with structured patterns and output formats. Install via CLI or copy the prompt below.
Use Cases
- Auditing code for OWASP Top 10 vulnerabilities
- Implementing authentication and authorization patterns
- Reviewing API security, rate limiting, and input validation
- Hardening infrastructure and dependency security
Example Prompts
System Prompt (30 words)
Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns.
Frequently Asked Questions
What is Semgrep?
Semgrep is a free security skill for AI coding agents. Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML rules, or detect specific bug patterns.. It provides a specialized system prompt that configures your agent with security expertise.
How do I use Semgrep with Claude Code?
Run npx playbooks add skill semgrep/skills --skill semgrep in your terminal to install Semgrep into your Claude Code session. It works immediately after installation.
Which AI coding agents work with Semgrep?
Semgrep is compatible with Claude Code, Cursor, GitHub Copilot, Windsurf, OpenClaw, Cline, and any AI agent that supports custom system prompts or .cursorrules files.
Is Semgrep free to use?
Yes, Semgrep is completely free and open source. The full source is available on GitHub at https://github.com/semgrep/skills/tree/main/skills/semgrep. You only need a subscription to the AI agent you use it with.
