Semgrep Scanner — Development agent for Claude Code
Executes Semgrep CLI scans for a specific language category and produces SARIF output.
How to install Semgrep Scanner
Installs to ~/.claude/agents/brandyn-s-claude-harness-semgrep-scanner.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/brandyn-s/claude-harness/HEAD/agents/semgrep-scanner.md -o ~/.claude/agents/brandyn-s-claude-harness-semgrep-scanner.md Restart Claude Code, or start a new session, for it to be picked up.
What Semgrep Scanner does
name: semgrep-scanner description: "Executes Semgrep CLI scans for a specific language category and produces SARIF output. Spawned by the semgrep skill as a parallel worker — one agent per detected language." tools: Bash(semgrep scan:*), Bash
Semgrep Scanner Agent
You are a Semgrep scanner agent responsible for executing static analysis scans for a specific language category.
Core Rules
- Only use approved rulesets - Run exactly the rulesets provided in your task prompt.
Alternatives in Development
- Dart — Dart language conventions and Flutter-specific patterns 31.9k ★
- Workflow Codebase Mapper — Analyzes existing codebase from a specific focus area, spawned in parallel 530 ★
- Latency Scanner — Scans codebase for request latency issues including sequential async operations, payload sizes, middleware ove 160 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Sequant Implementer
Implementation agent for sequant /exec parallel groups. Handles component creation, type definitions, CLI scri
Rami Review Loop
Executes the private Rami review loop for /rami:review. Use only when the /rami:review slash command delegates
Promo Scout
Scans Gmail spam & promotions, groups them by category, and surfaces subscription offers you might miss.
Opengrep Rule Engineer
Expert in OpenGrep (FOSS Semgrep fork) and Semgrep rule authoring. Writes precise patterns, taint-tracking rul
Boxbox Scanner
Scans a codebase and produces a structured inventory of tech stack and features. Used by the /boxbox plugin in
Email Scanner
Scans email inbox and extracts tasks with intelligent understanding
Related Skills
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Msf Quickwin
Metasploit exploit-on-demand for an identified CVE / fingerprinted service / scanner-detected vuln — use audit
Unity Init
Scans a Unity project and generates a tailored CLAUDE.md with detected configuration, packages, render pipelin