semgrep-rule-creator

SKILL.md

Create production-quality Semgrep rules with proper testing and validation.

Missing safe cases in tests - leads to undetected false positives:

This skill guides creation of Semgrep rules that detect security vulnerabilities and code patterns. Rules are created iteratively: analyze the problem, write tests first, analyze AST structure, write the rule, iterate until all tests pass, optimize the rule.

Crea reglas Semgrep personalizadas para detectar vulnerabilidades de seguridad, patrones de errores y patrones de código. Úselo al escribir reglas de Semgrep o crear detecciones de análisis estáticos personalizados. Fuente: trailofbits/skills.

Ver original