Semgrep AppSec Scanner

Trigger / When to Use

Use this skill when the user asks for source-code vulnerability scanning, secure coding rule enforcement, custom SAST checks, secret scanning workflow design, or Semgrep Supply Chain dependency analysis.

Good trigger phrases:

• "scan this code with Semgrep"
• "find injection bugs"
• "add SAST to CI"
• "write a Semgrep rule"
• "scan dependencies with Semgrep Supply Chain"
• "triage Semgrep findings"

Core Capabilities