SkillSemgrep

Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by Semgrep

Works with

Claude

View on GitHub

37 GitHub stars (37)

Steady at 37 stars — no new stars in the 16 days since Sep 30.

1 skill (1 skills found in its SKILL.md files)
9 forks (9 forks)
2mo ago last update (Last updated 2mo ago)

Install

Skills CLI

npx skills add KimYx0207/SkillSemgrep

Asks which agents to install it for. Add -g to install it for every project.

Claude Code

git clone https://github.com/KimYx0207/SkillSemgrepcp -r "SkillSemgrep" ~/.claude/skills/SkillSemgrep

Copies the code-security skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).

Plugin

/plugin marketplace add KimYx0207/SkillSemgrep

Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.

Skills can run code on your machine — read the SKILL.md first.

What it does

In the author's own words, from each skill's SKILL.md.

code-security

Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security scanning, vulnerability detection, code auditing, secrets checking, or says things like 安全扫描, 代码扫描, 扫漏洞, 安全检查, 漏洞检测, 扫一下安全.
SKILL.md on GitHub (opens in a new tab)

Review before you install

A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.

Encoders & Decoders

Hash Generators

Code Formatters

HTML Tools

JavaScript Tools

Network Tools

Database Tools

Development Tools

Miscellaneous Tools

SkillSemgrep