{"id":"c4ccdc96-f755-4847-b034-030d653900c7","shortId":"FL5Lva","kind":"skill","title":"Semgrep Pattern Matching Analyzer","tagline":"Writes and deploys custom Semgrep rules using pattern, pattern-either, and metavariable-regex operators for multi-language SAST scanning. Manages rule bundles in semgrep.yml with autofix transformations.","description":"# Semgrep Pattern Matching Analyzer\n\nWrites and deploys custom Semgrep rules using pattern, pattern-either, and metavariable-regex operators for multi-language SAST scanning. Manages rule bundles in semgrep.yml with autofix transformations.\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- $ brew install semgrep\n- $ docker run -it -v \"${PWD}:/src\" semgrep/semgrep semgrep login\n- $ docker run -e SEMGREP_APP_TOKEN=<TOKEN> --rm -v \"${PWD}:/src\" semgrep/semgrep semgrep ci\n- $ brew upgrade semgrep\n\nRequirements and caveats from upstream:\n- <a href=\"https://hub.docker.com/r/semgrep/semgrep\">\n- <img src=\"https://img.shields.io/docker/pulls/semgrep/semgrep.svg?style=flat-square\" alt=\"Docker Pulls\" />\n- <img src=\"https://img.shields.io/docker/pulls/semgrep/semgrep.svg?style=flat-square\" alt=\"Docker Pulls (Old)\" />\n\nBasic usage or getting-started notes:\n- Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep [supports 30+ languages](#language-support) and can run in an IDE, as a...\n- [From the Semgrep AppSec Platform](#option-1-getting-started-from-the-semgrep-appsec-platform-recommended)\n- [From the CLI](#option-2-getting-started-from-the-cli)\n\n- Source: https://github.com/semgrep/semgrep\n- Extracted from upstream docs: https://raw.githubusercontent.com/semgrep/semgrep/HEAD/README.md\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/semgrep-pattern-matching-analyzer/)","tags":["semgrep","pattern","matching","analyzer","skills","agentskillexchange","agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex"],"capabilities":["skill","source-agentskillexchange","skill-semgrep-pattern-matching-analyzer","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/semgrep-pattern-matching-analyzer","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,538 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:24.957Z","embedding":null,"createdAt":"2026-05-18T13:19:18.272Z","updatedAt":"2026-05-18T19:12:24.957Z","lastSeenAt":"2026-05-18T19:12:24.957Z","tsv":"'-1':164 '-2':178 '/semgrep/semgrep':188 '/semgrep/semgrep/head/readme.md':195 '/skills/semgrep-pattern-matching-analyzer/)':202 '/src':89,102 '30':145 'agent':197 'agentskillexchange.com':201 'agentskillexchange.com/skills/semgrep-pattern-matching-analyzer/)':200 'analysi':129 'analyz':4,38 'app':97 'appsec':161,171 'autofix':33,67 'basic':114 'brew':81,106 'bug':135 'bundl':29,63 'caveat':111 'ci':105 'cli':176,184 'code':133,141 'custom':8,42 'deploy':7,41 'doc':192 'docker':84,93 'e':95 'either':15,49 'enforc':137 'environ':80 'exchang':199 'extract':189 'fast':124 'find':134 'get':118,166,180 'getting-start':117 'getting-started-from-the-c':179 'getting-started-from-the-semgrep-appsec-platform-recommend':165 'github.com':187 'github.com/semgrep/semgrep':186 'guardrail':139 'ide':155 'instal':69,73,82 'languag':24,58,146,148 'language-support':147 'login':92 'manag':27,61 'match':3,37,78 'metavari':18,52 'metavariable-regex':17,51 'multi':23,57 'multi-languag':22,56 'note':120 'open':126 'open-sourc':125 'oper':20,54 'option':163,177 'path':76 'pattern':2,12,14,36,46,48 'pattern-eith':13,47 'platform':162,172 'pwd':88,101 'raw.githubusercontent.com':194 'raw.githubusercontent.com/semgrep/semgrep/head/readme.md':193 'recommend':173 'regex':19,53 'requir':109 'rm':99 'rule':10,28,44,62 'run':85,94,152 'sast':25,59 'scan':26,60 'search':132 'secur':138 'semgrep':1,9,35,43,83,91,96,104,108,121,143,160,170 'semgrep.yml':31,65 'semgrep/semgrep':90,103 'setup':75 'skill':198 'skill-semgrep-pattern-matching-analyzer' 'sourc':127,185,196 'source-agentskillexchange' 'standard':142 'start':119,167,181 'static':128 'support':144,149 'token':98 'tool':130 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'transform':34,68 'upgrad':107 'upstream':72,113,191 'usag':115 'use':11,45,70 'v':87,100 'write':5,39","prices":[{"id":"1a336c5e-dd0a-4728-8175-4567d3e604d3","listingId":"c4ccdc96-f755-4847-b034-030d653900c7","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:19:18.272Z"}],"sources":[{"listingId":"c4ccdc96-f755-4847-b034-030d653900c7","source":"github","sourceId":"agentskillexchange/skills/semgrep-pattern-matching-analyzer","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/semgrep-pattern-matching-analyzer","isPrimary":false,"firstSeenAt":"2026-05-18T13:19:18.272Z","lastSeenAt":"2026-05-18T19:12:24.957Z"}],"details":{"listingId":"c4ccdc96-f755-4847-b034-030d653900c7","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"semgrep-pattern-matching-analyzer","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"cfeb50c0fdd68e194763c1a073f13e77cc915971","skill_md_path":"skills/semgrep-pattern-matching-analyzer/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/semgrep-pattern-matching-analyzer"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Semgrep Pattern Matching Analyzer","description":"Writes and deploys custom Semgrep rules using pattern, pattern-either, and metavariable-regex operators for multi-language SAST scanning. Manages rule bundles in semgrep.yml with autofix transformations."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/semgrep-pattern-matching-analyzer"},"updatedAt":"2026-05-18T19:12:24.957Z"}}