Skills
.Work. You
Rest

semgrep-review

Community

Triages semgrep findings into real issues fast.

Software Engineering#vulnerability#static-analysis#triage#code-review#semgrep#escaping#nosemgrep
Authorjaeyeom
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Analyzes semgrep scan findings to distinguish real vulnerabilities from false positives and prepares targeted fixes with safe coding practices.

Core Features & Use Cases

  • Triage each finding by examining source, data flow, and sanitization to determine risk.
  • Propose framework-native escaping and minimal, well-documented nosemgrep suppressions.
  • Integrate with CI workflows to automate verification and documentation of fixes.
  • Use case: In a codebase with semgrep results, triage findings, apply safe fixes, and annotate false positives for future review.

Quick Start

Scan your repository with semgrep, triage findings, and apply suggested fixes.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: semgrep-review
Download link: https://github.com/jaeyeom/claude-toolbox/archive/main.zip#semgrep-review

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.