Semgrep publishes agent skills for application security work, covering OWASP-based guidance for LLM applications such as RAG systems and chatbots, secure coding practices for code that handles user input and authentication, and running Semgrep static analysis scans along with writing custom YAML detection rules. The author's most popular skills center on finding and preventing vulnerabilities before code ships, from prompt injection in AI apps to SQL injection and other common bug patterns.
Skills
3 skills · 339 stars · NOASSERTION
Code Security Security guidelines for writing secure code.
Llm Security Security guidelines for LLM applications based on OWASP Top 10 for LLM 2025.
Semgrep Run Semgrep static analysis scans and create custom detection rules.