{"$schema":"https://top-agent-skills.com/schemas/skill.v1.json","name":"code-security","slug":"semgrep-code-security","canonical":"https://top-agent-skills.com/skill/semgrep-code-security","description":"Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for SQL injection' or 'review security'. Always consult this skill when writing or reviewing any code that handles user input, authentication, file operations, database queries, network requests, cryptography, or infrastructure configuration (Terraform, Kubernetes, Docker, GitHub Actions) — even if the user doesn't explicitly mention security.","tagline":"A vendor-maintained rule corpus for secure code review — one reference file per vulnerability class, from SQL injection to Terraform misconfiguration.","bestFor":"Secure-code review with real depth behind each finding: the skill ships separate references for SQL injection, XSS, SSRF, XXE, CSRF, secrets, regex DoS, memory safety, Docker, Kubernetes, and Terraform on AWS and GCP.","notIdealFor":"Running an actual scan — this is guidance, not a scanner. Pair it with the semgrep skill when you need findings rather than review standards.","publisher":{"name":"Semgrep","url":"https://semgrep.dev","tier":"verified-org"},"license":"Semgrep Rules License v1.0","isOpenSource":false,"surfaces":["claude-code"],"compatibility":["claude-code"],"capabilityLevel":"read-only","setup":{"time":"1 min","complexity":"Low"},"install":[{"agent":"claude-code","command":"npx skills add semgrep/skills","manual":null,"followUp":"No CLI or API key needed — this skill is guidance only."}],"taxonomy":{"primaryCategories":["security-auditing","code-quality-review"],"verticalCategories":["security","engineering"],"tags":["Secure coding","OWASP","Code review"],"filters":["verified-org","one-command-install","read-only","bundles-scripts","recently-updated","agent-friendly","works-with-claude-code"]},"links":{"github":"https://github.com/semgrep/skills/tree/main/skills/code-security","docs":"https://github.com/semgrep/skills/blob/main/skills/code-security/SKILL.md","website":null},"_meta":{"score":{"value":52,"rubric":"1.0","inputs":{"installCount":0,"provenance":12.8,"githubStars":6.9,"recency":8.5,"compatibility":2,"documentation":10,"installErgonomics":10,"license":1.5,"verification":0.5}},"stats":{"installCount":null,"githubStars":268,"lastUpdated":"2026-07-28","verifiedAt":null}}}