{"id":"b90ddd2f-2858-4195-b269-28691f3b79b8","shortId":"bww6zZ","kind":"skill","title":"Semgrep Custom Pattern Library","tagline":"Builds custom Semgrep rules using the semgrep YAML rule syntax with metavariable-pattern, pattern-either, and taint-mode analysis. Generates rule packs for OWASP Top 10 detection across Python, JavaScript, and Go codebases.","description":"# Semgrep Custom Pattern Library\n\nBuilds custom Semgrep rules using the semgrep YAML rule syntax with metavariable-pattern, pattern-either, and taint-mode analysis. Generates rule packs for OWASP Top 10 detection across Python, JavaScript, and Go codebases.\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- $ brew install semgrep\n- $ docker run -it -v \"${PWD}:/src\" semgrep/semgrep semgrep login\n- $ docker run -e SEMGREP_APP_TOKEN=<TOKEN> --rm -v \"${PWD}:/src\" semgrep/semgrep semgrep ci\n- $ brew upgrade semgrep\n\nRequirements and caveats from upstream:\n- <a href=\"https://hub.docker.com/r/semgrep/semgrep\">\n- <img src=\"https://img.shields.io/docker/pulls/semgrep/semgrep.svg?style=flat-square\" alt=\"Docker Pulls\" />\n- <img src=\"https://img.shields.io/docker/pulls/semgrep/semgrep.svg?style=flat-square\" alt=\"Docker Pulls (Old)\" />\n\nBasic usage or getting-started notes:\n- Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep [supports 30+ languages](#language-support) and can run in an IDE, as a...\n- [From the Semgrep AppSec Platform](#option-1-getting-started-from-the-semgrep-appsec-platform-recommended)\n- [From the CLI](#option-2-getting-started-from-the-cli)\n\n- Source: https://github.com/semgrep/semgrep\n- Extracted from upstream docs: https://raw.githubusercontent.com/semgrep/semgrep/HEAD/README.md\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/semgrep-custom-pattern-library/)","tags":["semgrep","custom","pattern","library","skills","agentskillexchange","agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex"],"capabilities":["skill","source-agentskillexchange","skill-semgrep-custom-pattern-library","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/semgrep-custom-pattern-library","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,552 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:24.642Z","embedding":null,"createdAt":"2026-05-18T13:19:17.891Z","updatedAt":"2026-05-18T19:12:24.642Z","lastSeenAt":"2026-05-18T19:12:24.642Z","tsv":"'-1':176 '-2':190 '/semgrep/semgrep':200 '/semgrep/semgrep/head/readme.md':207 '/skills/semgrep-custom-pattern-library/)':214 '/src':101,114 '10':33,73 '30':157 'across':35,75 'agent':209 'agentskillexchange.com':213 'agentskillexchange.com/skills/semgrep-custom-pattern-library/)':212 'analysi':26,66,141 'app':109 'appsec':173,183 'basic':126 'brew':93,118 'bug':147 'build':5,45 'caveat':123 'ci':117 'cli':188,196 'code':145,153 'codebas':40,80 'custom':2,6,42,46 'detect':34,74 'doc':204 'docker':96,105 'e':107 'either':21,61 'enforc':149 'environ':92 'exchang':211 'extract':201 'fast':136 'find':146 'generat':27,67 'get':130,178,192 'getting-start':129 'getting-started-from-the-c':191 'getting-started-from-the-semgrep-appsec-platform-recommend':177 'github.com':199 'github.com/semgrep/semgrep':198 'go':39,79 'guardrail':151 'ide':167 'instal':81,85,94 'javascript':37,77 'languag':158,160 'language-support':159 'librari':4,44 'login':104 'match':90 'metavari':17,57 'metavariable-pattern':16,56 'mode':25,65 'note':132 'open':138 'open-sourc':137 'option':175,189 'owasp':31,71 'pack':29,69 'path':88 'pattern':3,18,20,43,58,60 'pattern-eith':19,59 'platform':174,184 'pwd':100,113 'python':36,76 'raw.githubusercontent.com':206 'raw.githubusercontent.com/semgrep/semgrep/head/readme.md':205 'recommend':185 'requir':121 'rm':111 'rule':8,13,28,48,53,68 'run':97,106,164 'search':144 'secur':150 'semgrep':1,7,11,41,47,51,95,103,108,116,120,133,155,172,182 'semgrep/semgrep':102,115 'setup':87 'skill':210 'skill-semgrep-custom-pattern-library' 'sourc':139,197,208 'source-agentskillexchange' 'standard':154 'start':131,179,193 'static':140 'support':156,161 'syntax':14,54 'taint':24,64 'taint-mod':23,63 'token':110 'tool':142 'top':32,72 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'upgrad':119 'upstream':84,125,203 'usag':127 'use':9,49,82 'v':99,112 'yaml':12,52","prices":[{"id":"e3941793-2bab-403e-873f-4b8ebe2d02c2","listingId":"b90ddd2f-2858-4195-b269-28691f3b79b8","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:19:17.891Z"}],"sources":[{"listingId":"b90ddd2f-2858-4195-b269-28691f3b79b8","source":"github","sourceId":"agentskillexchange/skills/semgrep-custom-pattern-library","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/semgrep-custom-pattern-library","isPrimary":false,"firstSeenAt":"2026-05-18T13:19:17.891Z","lastSeenAt":"2026-05-18T19:12:24.642Z"}],"details":{"listingId":"b90ddd2f-2858-4195-b269-28691f3b79b8","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"semgrep-custom-pattern-library","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"7abd3a49ab5dbdd7ea2469a12c90cb946bcd77a0","skill_md_path":"skills/semgrep-custom-pattern-library/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/semgrep-custom-pattern-library"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"Semgrep Custom Pattern Library","description":"Builds custom Semgrep rules using the semgrep YAML rule syntax with metavariable-pattern, pattern-either, and taint-mode analysis. Generates rule packs for OWASP Top 10 detection across Python, JavaScript, and Go codebases."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/semgrep-custom-pattern-library"},"updatedAt":"2026-05-18T19:12:24.642Z"}}