754,000+ skills indexed

Explore all skills by this author →

Verified:Website 𝕏@DXXX1988 GitHub

semgrep-rule-creator

Create custom Semgrep rules to detect security vulnerabilities and code patterns.

Updated Aug 23, 2026

Search Tags:#static analysis #code analysis #security #vulnerability detection #semgrep

One-click install

npx skills add https://github.com/dxxx/Bot-OS --skill semgrep-rule-creator-dxxx

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: semgrep-rule-creator
Source: https://github.com/dxxx/Bot-OS/tree/main/skills/trailofbits-security/plugins/semgrep-rule-creator/skills/semgrep-rule-creator
Command: npx skills add https://github.com/dxxx/Bot-OS --skill semgrep-rule-creator-dxxx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of creating custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns, ensuring high-quality static analysis.

Core Features & Use Cases

Custom Rule Creation: Build rules tailored to specific security vulnerabilities and code patterns.
Security Analysis: Detect security issues like SQL injection, command injection, and XSS attacks.
Code Quality: Enforce coding standards and identify potential bugs in codebases.
Use Case: For a developer looking to add a new rule to detect a specific type of SQL injection vulnerability in a Python codebase.

Quick Start

Use the semgrep-rule-creator skill to create a new rule for detecting SQL injection vulnerabilities in Python code.

Frequently Asked Questions about semgrep-rule-creator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I create custom Semgrep rules for detecting security vulnerabilities?▼

Creating custom Semgrep rules for security analysis involves using Semgrep syntax and pattern matching to target specific bug patterns and security issues like SQL injection or XSS within your codebase.

What is static analysis with Semgrep used for in code analysis?▼

Static analysis with Semgrep is used for identifying security vulnerabilities and enforcing code quality standards by matching specific code patterns without executing the program, ensuring high-quality static analysis.

Can I use Semgrep to detect SQL injection vulnerabilities in a Python codebase?▼

Yes, you can use Semgrep to detect SQL injection vulnerabilities in a Python codebase by building custom rules tailored to match the specific unsafe query patterns and security issues present in your code.

Do I need to know Semgrep syntax to write custom static analysis rules?▼

Yes, creating custom static analysis rules requires knowledge of Semgrep syntax and pattern matching to accurately target and detect specific security vulnerabilities and code patterns within your codebase.

What's the best way to enforce coding standards and identify potential bugs with Semgrep?▼

The best way to enforce coding standards and identify potential bugs with Semgrep is to create custom rules that match specific code patterns and security issues, ensuring high-quality static analysis across your codebase.

Related Skills

Explore More Software Engineering Skills→

security-bounty-hunter

Identify remote security vulnerabilities and exploit paths in code repositories.

kennyolofsson23-netizen

semgrep-rule-creator

Create custom Semgrep rules for security vulnerabilities and bug patterns.

static-analysis

Run CodeQL and Semgrep scans and parse SARIF results.

semgrep-rule-creator

Automate creation of Semgrep rules for security vulnerabilities and code patterns.