SkillSemgrep — Security skill for Claude Code
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep Security scanning skill for Claude Code, powered by Semgrep.
How to install SkillSemgrep
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open KimYx0207/SkillSemgrep and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What SkillSemgrep does
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep Security scanning skill for Claude Code, powered by Semgrep.
Alternatives in Security
- FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
- Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
- Google Workspace Alert Center — Manage security alerts 21.6k ★
README
[中文](./README.md) | [English](./README_EN.md)
Claude Code 安全扫描 Skill
[](https://github.com/KimYx0207/SkillSemgrep) [](https://github.com/KimYx0207/SkillSemgrep) [](https://github.com/KimYx0207/SkillSemgrep) [](https://github.com/KimYx0207/SkillSemgrep)
因合并关系，本仓库已迁入 [Kim Service](https://github.com/KimYx0207/Kim_Service) 合集，不再单独发布新版本。请前往 Kim Service 获取新版本、安装说明和更新记录。
老金的开源知识库，实时更新群二维码：https://my.feishu.cn/wiki/OhQ8wqntFihcI1kWVDlcNdpznFf
📞 联系方式
获取更多AI资讯和技术支持
微信公众号：获取AI第一信息 | 个人微信号：备注'AI'加群交流
☕ 请我喝杯咖啡
如果这个教程对你有帮助，欢迎打赏支持！
微信支付 |
支付宝 |
概述
说句中文就能扫漏洞。
基于 [Semgrep](https://semgrep.dev/) 的代码安全扫描技能，安装后在 Claude Code 里用自然语言触发安全扫描，无需记任何命令。
它能干什么
- 全面安全扫描：自动检测 OWASP Top 10 漏洞
- 密钥泄露检测：找出代码里硬编码的 API Key、密码、Token
- 多语言支持：Python、JavaScript/TypeScript、Go 等几十种语言
- 结构化报告：按高危/中危/低危分类，附带修复建议
- 中文触发：说"安全扫描"、"扫漏洞"就能用，也支持英文和斜杠命令
前置要求
- Claude Code 已安装
Python 和 Semgrep 不用你手动装，安装脚本会自动搞定。
安装
方式一：Clone + 一键安装（推荐）
git clone https://github.com/KimYx0207/SkillSemgrep.git
cd SkillSemgrep**Mac / Linux：**
bash install.sh**Windows（Po
Related Skills
Claude Security Research Skill
AI-powered security research assistant for Claude Code — structured assessment workflows, tool orchestration,
Security Semgrep Setup
Immune
Immune — the agent security loop that turns every attack into an antibody. MCP firewall → replayable breach tr
Agent Security Skills
Claude Code security plugin and agentskills.io skill pack for securing LLM agents: threat modelling, config au
CodeWarden
CodeWarden is an autonomous code review agent that watches every pull request on GitHub. It pairs deterministi
Deepsec
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Related Agents
Deps Audit
You are a dependency security expert specializing in vulnerability scanning, license compliance, and... - wsho
Chain
Supply chain security — SBOM generation, dependency scanning, third-party risk, license compliance
Mobile Attacker
Mobile application security specialist for Android and iOS. Handles APK decompilation, static/dynamic analysis
