Skill · DevOps

semgrep

DevOpsmcpdirectory↓ 15

Semgrep is a fast static analysis tool for finding bugs and enforcing code standards. Use when scanning code for security issues or integrating into CI/CD pipelines.

Install
$ npx skills add trailofbits/skills --skill semgrep

Generic steps — the original listing is authoritative. Copy the command, run it where you keep agent skills, then confirm version and requirements in the original listing.

At a glance

  • Semgrep is a fast static analysis tool for finding bugs and enforcing code standards.
  • 15 installs reported on mcpdirectory.
  • Published by trailofbits — listed by mcpdirectory. Setup details live in the original listing.

How to use

  1. Copy the Install command above.
  2. Run it where you keep agent skills.
  3. Confirm version and requirements in the original listing.

More in DevOps

  • serena — This skill provides symbol-level code understanding and navigation using Language Server Protocol (LSP). Enabl
  • create-mcp-server — Instructions for creating MCP (Model Context Protocol) servers that expose tools and resources for the agent t
  • opencode-cli — This skill should be used when configuring or using the OpenCode CLI for headless LLM automation.
  • azure-devops-rest-api — Guide for working with Azure DevOps REST APIs and OpenAPI specifications.
  • gitlab-cli-skills — Use when working with GitLab CLI (glab) commands across auth, CI/CD, merge requests, issues, releases, repos,
  • feishu-doc — Feishu document read/write operations. Activate when user mentions Feishu docs, cloud docs, or docx links.

More from trailofbits

  • modern-python — Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone
  • differential-review — Performs security-focused differential review of code changes (PRs, commits, diffs).

← Back to Skills catalog · View original listing ↗

Outdated or wrong? Report this listing.