Search

Semgrep · trailofbits/skills

8 skills found.
Category:
Search results
#SkillRepositoryStarsUsed inTokensAuto-checkLicenceUpdated
1

Detects languages, proposes rulesets for approval, then runs the approved Semgrep scan across a codebase and merges the output into one SARIF file.

trailofbits/skills7.5k—~3.7kAutomated safety check: NotesCC-BY-SA-4.0yesterday
2

Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns.

trailofbits/skills7.5k6 repos~1.8kAutomated safety check: NotesCC-BY-SA-4.0yesterday
3

Creates language variants of existing Semgrep rules. An agent skill from trailofbits/skills.

trailofbits/skills7.5k5 repos~3.4kAutomated safety check: NotesCC-BY-SA-4.0yesterday
4
4.Sarif ParsingOfficial

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.

trailofbits/skills7.5k3 repos~4.4kAutomated safety check: NotesCC-BY-SA-4.0yesterday
5

Overlays SARIF results, weAudit annotations and binary-analysis exports onto a Trailmark code graph so each finding can be read next to blast radius and taint data.

trailofbits/skills7.5k—~2.3kAutomated safety check: PassCC-BY-SA-4.0yesterday
6

Gets your own codebase ready for an external security review: sets review goals, runs static analysis, raises test coverage, removes dead code and writes documentation.

trailofbits/skills7.5k—~2.5kAutomated safety check: PassCC-BY-SA-4.0yesterday
7

Expands one confirmed or suspected vulnerability into a Trailmark graph neighborhood of variant candidates by finding sibling functions, shared callers and callees, common sensitive sinks, common…

trailofbits/skills7.5k—~1.1kAutomated safety check: NotesCC-BY-SA-4.0yesterday
8

Hunts for the other instances of a bug already found — the variants of one root cause across a codebase.

trailofbits/skills7.5k—~967Automated safety check: PassCC-BY-SA-4.0yesterday