SkillSemgrep
Description
Claude Code安全扫描Skill：说句中文就能扫漏洞，基于Semgrep | Security scanning skill for Claude Code, powered by Semgrep
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
[中文](./README.md) | [English](./README_EN.md)
Claude Code 安全扫描 Skill
[](https://github.com/KimYx0207/SkillSemgrep) [](https://github.com/KimYx0207/SkillSemgrep) [](https://github.com/KimYx0207/SkillSemgrep) [](https://github.com/KimYx0207/SkillSemgrep)
因合并关系，本仓库已迁入 [Kim Service](https://github.com/KimYx0207/Kim_Service) 合集，不再单独发布新版本。请前往 Kim Service 获取新版本、安装说明和更新记录。
老金的开源知识库，实时更新群二维码：https://my.feishu.cn/wiki/OhQ8wqntFihcI1kWVDlcNdpznFf
📞 联系方式
获取更多AI资讯和技术支持
微信公众号：获取AI第一信息 | 个人微信号：备注'AI'加群交流
☕ 请我喝杯咖啡
如果这个教程对你有帮助，欢迎打赏支持！
微信支付 |
支付宝 |
概述
说句中文就能扫漏洞。
基于 [Semgrep](https://semgrep.dev/) 的代码安全扫描技能，安装后在 Claude Code 里用自然语言触发安全扫描，无需记任何命令。
它能干什么
- 全面安全扫描：自动检测 OWASP Top 10 漏洞
- 密钥泄露检测：找出代码里硬编码的 API Key、密码、Token
- 多语言支持：Python、JavaScript/TypeScript、Go 等几十种语言
- 结构化报告：按高危/中危/低危分类，附带修复建议
- 中文触发：说"安全扫描"、"扫漏洞"就能用，也支持英文和斜杠命令
前置要求
- Claude Code 已安装
Python 和 Semgrep 不用你手动装，安装脚本会自动搞定。
安装
方式一：Clone + 一键安装（推荐）
git clone https://github.com/KimYx0207/SkillSemgrep.git
cd SkillSemgrep**Mac / Linux：**
bash install.sh**Windows（Po
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Google Workspace Model Armor
Filter user-generated content for safety
