Updated 2mo ago
by KimYx0207
SkillSemgrep
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by Semgrep
37 GitHub stars (37)
Steady at 37 stars — no new stars in the 16 days since Sep 30.
- 1 skill (1 skills found in its SKILL.md files)
- 9 forks (9 forks)
- 2mo ago last update (Last updated 2mo ago)
Install
Skills CLI
npx skills add KimYx0207/SkillSemgrep
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/KimYx0207/SkillSemgrepcp -r "SkillSemgrep" ~/.claude/skills/SkillSemgrep
Copies the code-security skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add KimYx0207/SkillSemgrep
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
code-security
Runs Semgrep security scans on the current project to detect vulnerabilities, secrets leakage, and OWASP Top 10 issues. Use when the user asks for security scanning, vulnerability detection, code auditing, secrets checking, or says things like 安全扫描, 代码扫描, 扫漏洞, 安全检查, 漏洞检测, 扫一下安全.
SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
andrej-karpathy-skillsby multica-ai A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
-
graphifyby Graphify-Labs Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Curs…