Semgrep Rule Creator

When to Use

• Writing custom Semgrep rules for project-specific vulnerability patterns
• Creating detection rules for internal APIs or frameworks
• Building taint-mode rules to track data flow from sources to sinks
• Porting detection logic from other tools to Semgrep
• Defining coding standards as enforceable rules

When NOT to Use

• Running existing Semgrep scans (use the semgrep sub-skill in static-analysis)
• Complex interprocedural analysis (use CodeQL for deep data flow)
• Binary or bytecode analysis

Rule Template