About
This skill enables developers to run Semgrep for fast static code analysis and security vulnerability scanning. It supports writing custom YAML rules, using taint mode analysis, and integrating Semgrep into CI/CD pipelines. Use it when you need to quickly scan code for security patterns or set up automated security checks.
Quick Install
Claude Code
Recommendednpx skills add plurigrid/asi -a claude-code/plugin add https://github.com/plurigrid/asigit clone https://github.com/plurigrid/asi.git ~/.claude/skills/semgrepCopy and paste this command in Claude Code to install this skill
GitHub Repository
Frequently asked questions
What is the semgrep skill?
semgrep is a Claude Skill by plurigrid. Skills package instructions and resources that Claude loads on demand, so Claude can perform semgrep-related tasks without extra prompting.
How do I install semgrep?
Use the install commands on this page: add semgrep to Claude Code as a plugin, or clone its repository into your skills directory, then restart Claude so it picks up the skill.
What category does semgrep belong to?
semgrep is in the static-analysis category, tagged ai and design.
Is semgrep free to use?
Yes. semgrep is listed on AIMCP and free to install. It runs inside Claude, so no separate service account is required to use the skill itself.
Related Skills
This skill parses and processes SARIF files to work with static analysis results. It helps developers aggregate findings from multiple tools, deduplicate alerts, and extract specific vulnerabilities. Use it to integrate security scan data into CI/CD pipelines or analyze scan outputs.
This skill parses and processes SARIF files to work with static analysis results. It enables aggregating findings from multiple tools, deduplicating alerts, and extracting specific vulnerabilities. Use it to integrate security scan data into CI/CD pipelines or analyze scan outputs.
This skill enables CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis. Developers should use it to analyze code, create databases, write custom QL queries, perform audits, or set up CodeQL in CI/CD pipelines. It's ideal for comprehensive security-focused code review and automation.
This skill enables CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis. Developers should use it to analyze code, create CodeQL databases, write custom QL queries, or set up security audits in CI/CD pipelines. It's ideal for performing comprehensive security analysis on codebases.