Semgrep Security Review Agent

Performs SAST scanning using Semgrep CLI and Semgrep Registry rules. Detects OWASP Top 10 vulnerabilities, injection flaws, and insecure patterns with custom rule YAML authoring.

Installation

Method 1, Agent Skill Exchange

• Install from the marketplace listing: https://agentskillexchange.com/skills/semgrep-security-review-agent/

Method 2, Git clone

git clone https://github.com/agentskillexchange/skills.git && cd skills/skills/semgrep-security-review-agent

Method 3, Download ZIP

• Download the repository ZIP and extract skills/semgrep-security-review-agent.

Method 4, Manual copy

• Copy this skill folder into your local skills directory, then reload your agent tooling.

Method 5, Fork and sync

• Fork the repository if you want to maintain local edits while syncing upstream changes.

Source

• Agent Skill Exchange