Semgrep Rule Creator
Writes custom Semgrep rules and refuses to call one done before its tests pass.
Install
Official/plugin marketplace add trailofbits/skills
Kendi kod tabanına özel bir statik analiz kuralı ya da açık deseni için tespit yazılırken
- Author
- Trail of Bits
- License
- CC-BY-SA-4.0
Builds detection rules for a specific bug or vulnerability pattern, taint-mode rules that follow user input all the way to a dangerous sink included. The discipline is the real payload: dump the AST to see how Semgrep parses the code, write both matching and deliberately non-matching cases, run the rule's test suite before declaring it finished. It also names the shortcuts that produce noisy rules and tells you to reject each one.
Similar skills
Humanizer
SkillRewrites machine-sounding prose without touching the facts.
I Have ADHD
SkillMakes the agent answer first and explain afterwards.
Systematic Debugging
SkillForces reproduce-first debugging instead of speculative patching
Comments(0)
Sign in to comment