
from skillsemgrep22
Run Semgrep-based security scans to detect vulnerabilities, secrets, and OWASP Top 10 issues, and produce a categorized report with remediation suggestions.
This skill runs Semgrep security scans against the current project to find known vulnerability patterns, secrets leaks, and common OWASP Top 10 issues. It outlines scanning workflows, recommended rule sets per language, and produces structured results suitable for triage and remediation.
Use when you need an automated code security check: before merges, during audits, or on-demand when a user asks for a vulnerability scan, secrets check, or OWASP-focused review. Useful in CI, local developer workflows, or interactive agent-driven audits.
Best for agents that can run shell commands and process JSON output (e.g., Claude Code / Codex / agents with shell access). The skill is language-agnostic and provides tailored rule recommendations for Python, JavaScript/TypeScript, and Go.
This skill has not been reviewed by our automated audit pipeline yet.