Semgrep Rule Creator (Trail of Bits)
7,303 starsOfficial skill from security firm Trail of Bits: create custom Semgrep rules for detecting security vulnerabilities, bug patterns and code patterns — the entry point to building your own static-analysis detections.
- First published：2026-01-14
- data as of：
- 2026-09-30
- Licence：
- CC-BY-SA-4.0
When to use it
When codifying your team's security or quality rules into automated Semgrep detections.
Caution
Licensed CC BY-SA 4.0 (attribution + share-alike) — derivative rules must carry the same license. Requires semgrep locally.
Install prompt
請幫我安裝「Semgrep Rule Creator (Trail of Bits)」技能：從 https://github.com/trailofbits/skills/tree/main/plugins/semgrep-rule-creator/skills/semgrep-rule-creator（技能路徑：plugins/semgrep-rule-creator/skills/semgrep-rule-creator/） 取得完整的技能目錄，放進我的 Agent 的技能目錄（例如專案內的 skills/ 資料夾，或該 Agent 文件指明的全域技能位置），確認裡面的 SKILL.md 存在、frontmatter 的 name 與 description 完整，然後列出這個技能宣告的腳本、外部工具與 API 需求，先不要執行任何腳本。Paste this to your agent. It deliberately contains no tool subcommands — check the tool's official docs for commands.
Compatible with