Skip to content

Semgrep

Semgrep-based static analysis: writing and testing custom rules, running published rulesets, and wiring pattern-based vulnerability detection into review and CI.

1 skill and 1 MCP server tagged Semgrep.

Skills

All skills

Trail of Bits' skill for writing production-quality Semgrep rules — pattern design, taint mode for data-flow bugs, and mandatory test-driven validation.

4 views

MCP servers

All MCP servers

MCP: Semgrep MCP

by Semgrep

Semgrep's official MCP server — scan code for security vulnerabilities, write and test custom rules, and pull findings from Semgrep Cloud, from inside an agent session.

Related tags

Tags that appear alongside this one, ranked by how often.

All tags