Semgrep Rule Creator
Writes custom Semgrep rules and refuses to call one done before its tests pass.
Install
Official/plugin marketplace add trailofbits/skills
Kendi kod tabanına özel bir statik analiz kuralı ya da açık deseni için tespit yazılırken
- Author
- Trail of Bits
- License
- CC-BY-SA-4.0
Builds detection rules for a specific bug or vulnerability pattern, taint-mode rules that follow user input all the way to a dangerous sink included. The discipline is the real payload: dump the AST to see how Semgrep parses the code, write both matching and deliberately non-matching cases, run the rule's test suite before declaring it finished. It also names the shortcuts that produce noisy rules and tells you to reject each one.
Similar skills
Semgrep Guardian
SkillHooks Semgrep into file writes so generated code is scanned before it can reach a pull request.
SAST Configuration
SkillSets up Semgrep, CodeQL and SonarQube so the pipeline blocks real findings.
Systematic Debugging
SkillForces reproduce-first debugging instead of speculative patching
Comments(0)
Sign in to comment