Last commit on April 25, 2026·Created on January 15, 2026
semgrep/skills
“A framework for identifying vulnerabilities and implementing secure coding practices.”
Combined rank
#540
across all skills
Stars
279
7d change unavailable
Forks
28
Watchers
5
Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of real attention, adoption, and active maintenance.
TL;DR
This skill provides security guidelines for writing and reviewing code to prevent common vulnerabilities. It assists application security engineers in auditing user input handling, authentication flows, and database queries to ensure software is resilient against attacks.
WHO IT'S FOR
Application Security Engineers
automating vulnerability detection with static analysis
AI Agent / Automation Builders
implementing secure RAG and agentic systems
Backend Engineers
writing secure code for database and network operations
DevSecOps Engineers
securing infrastructure as code configurations
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Want to install it?
NPX Skills AddRepository instructions