Skills and MCP tagged “semgrep”

security-bounty-hunter affaan-m skill Finds remotely reachable vulnerabilities that can support a bounty report. Use it when you need an exploitable path, not a broad security checklist. Claude Code CX Codex Cursor +1 4,500installs sast-configuration Seth Hobson skill Configures SAST checks for finding vulnerabilities in application code. Useful for CI/CD setup, custom rules, and security policy checks. Claude Code CX Codex Cursor 10,800installs semgrep trailofbits skill Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs security-reviewer https://github.com/Jeffallan skill Finds code and infrastructure vulnerabilities, assigns severity ratings, and suggests fixes. Use it for audits, secret scanning, and dependency checks. Claude Code CX Codex Cursor +1 6,000installs variant-analysis trailofbits skill Finds related occurrences of an already identified defect across a repository. Use it after a vulnerability or logic issue turns up and similar code needs checking. Claude Code CX Codex Cursor +1 6,400installs sarif-parsing trailofbits skill Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. Use it to filter findings, remove duplicates, or prepare results for CI/CD. Claude Code CX Codex Cursor +1 5,900installs semgrep-rule-creator trailofbits skill A skill that walks you through creating custom Semgrep rules to detect security vulnerabilities and code patterns in your projects. Use it when you need static analysis tailored to your codebase. Claude Code CX Codex Cursor +1 5,700installs semgrep-rule-variant-creator trailofbits skill Ports completed Semgrep rules to selected languages and creates separate rule and test directories. Use it when you already have a rule to adapt. Claude Code CX Codex Cursor +1 5,300installs audit-augmentation trailofbits skill Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths. Claude Code CX Codex Cursor +1 3,900installs