KS

kimyx0207/skillsemgrep

Security testing

This page was translated automatically. Technical details may differ from the original. View the original

37 stars Quality 66 Trend 35MIT

Claude Code securely scan Skill: Word in Chinese will clear the loophole

Overview

As a result of the merger, the warehouse has moved into the Kim Service collection and no new versions are issued separately. Please go to Kim Service to get new versions, installation instructions and updates. Open source knowledge base of Gold, real-time update of the 2-dimensional code of the group: [[T0] Access to more AI information and technical support Micro-Info: Access to AI First Information Based on Semgrep's code security scanning skills, the security scan is activated in Claude Code in a natural language without any command. - : Autodetection of OWASP Top 10 Hole - : Find API Key, Password, Token - :Python, JavaScript/TypeScript, Go, etc. - : high-risk/middle-risk/low-risk, with restoration advice - : Say "safe scan" and "clean-up" can be used and support English and slash-bar commands Script will automatically: 1. Test Python (not installed will prompt download links) 2. Test and install Semgrep (not installed will automatically pip install) 3. Copy SKILL.md to Skyll directory 4. Verify installation successful The most critical field is the definition. Claude Code uses it to do semantic matching -- you say "safe scan," and it matches all Skill's description, looking for the most relevant load. So you need to write the trigger in the file. "P/docker-compose"

Overview (machine translated)

Chinese

Claude Code, secure scan Skill

As a result of the merger, this repository has moved to the Kim Service collection and no new versions are issued separately. Please go to Kim Service to get new versions, installation instructions and updates.

Open-source knowledge base of Gold, real-time update of the 2D code of the group:[[T0]

📞 Contact

Access to additional AI information and technical support Micro-Intelligence Public Number: Getting AI First Message

# Zi, buy me a cup of coffee

If this program helps you, welcome support!

Wireless Payments

Pay the treasure.

I don’t…

General

A word in Chinese would close the gap.

Based on Semgrep’s code security scanning skills, the security scan is activated in Claude Code in a natural language without any command.

What can it do

  • ** Full security scan**: Automatic detection of OWASP Top 10 loopholes
  • ** Key leak detection**: find hard coded API Key, password, Token
  • ** Multilingual Support**: Python, JavaScript/TypeScript, Go -** Structured report**: high-risk/middlerisk/low-risk classification, with recommendations for rehabilitation
  • ** Trigger** in Chinese: Say “safe scan” and “clean the hole” will work and support English and slash commands

Pre-request

  • Claude Code installed

Python and Semgrep don’t need you to do it manually.

Install

Mac / Linux:

Windows (PowerShell):

Windows (Git Bash):

Script will automatically:

  1. Test Python (not installed will prompt download links)
  2. Detection and installation of Semgrep
  3. Copy SKILL.md to Skill Directory
  4. Validation of successful installation

Method II: Manual installation

If you don’t want to run the script, three steps are done:

Mac / Linux:

Windows (PowerShell):

Installation complete, no need to restart Claude Code. Hot Reloading will automatically load new Skill.

# Location description for installation

| Location, | Path, | Scope, | | - | | | | | Global (recommended) Project level.

This page was translated automatically. Technical details may differ from the original.

Recommended Tools

Try a different keyword or remove a filter.

Install

npx skillfish add kimyx0207/skillsemgrep
New to MCP? Start with the mcpskill.org guide →