Инструменты
Все Skills, MCP-серверы, CLI и плагины каталога. Фильтруйте по типу, профессии или тегу либо ищите по ключевому слову.
Профессия: Full-stack / Indie +2
Можно выбрать несколько: показываются ресурсы, подходящие хотя бы для одной из них.
Теги: semgrep
Можно выбрать несколько: показываются только ресурсы со всеми выбранными тегами.
4 ресурса
Trail of Bits Skills
SkillSkills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
trailofbits/skills7.8k
Semgrep
CLISemantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.
semgrep/semgrep17.3kSemgrep MCP
MCPSemgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.
semgrep/semgrep17.3kSemgrep Guardian
PluginSemgrep's official MCP server plus hooks: every file the agent writes is scanned with Semgrep Code, Supply Chain and Secrets for vulnerabilities, malicious dependencies and hardcoded secrets; the agent rewrites until clean or you dismiss findings. Requires a Semgrep login.
semgrep/guardian19