semgrep - Run Semgrep static analysis scans
Run Semgrep static analysis scan on a codebase using parallel subagents.
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- detect languages
- check Pro availability
- select scan mode
- select rulesets
- present scan plan
- spawn scan tasks
- merge results
- run Semgrep scans
- scan for vulnerabilities
- find security bugs
- generate SARIF files
Inputs
- codebase
- scan mode
- output directory
Outputs
- SARIF files
- scan results
- vulnerability reports
Requirements
- Semgrep CLI
- Bash tool
- Read tool
- Glob tool
- Task tool
- AskUserQuestion tool