Semgrep

Skills (3)

Claude uses these on its own when your request matches.

• add-and-validate-guardian-developer-semgrep-rulewrite a custom semgrep rule with the user, add it to guardian in either user or repo scope, and prove it fires by writing a file that should trip it. use when someone wants guardian to catch something it currently misses, asks to write or add a semgrep rule, or wants a project…
• install-mfwInstall the mfw (Semgrep Malware Firewall) CLI via the curl|sh installer and walk the user through setup — trust store, PATH shims, shell integration, and the background daemon — asking questions at real decision points. Detects when the user's shell rc files are *managed*…
• remove-guardian-developer-semgrep-ruleRemove a custom Semgrep rule from Guardian — list what is installed, work out which file holds the rule, and delete or edit it out of the user or repo rules directory. Use when someone wants Guardian to stop flagging something, asks to remove, delete or disable a custom rule,…

MCP server

Added to Claude Code when you install the plugin. You sign in to Semgrep the first time it is used.

• guardianLocal${CLAUDE_PLUGIN_ROOT}/scripts/hook claude mcp

Install

claude plugin install semgrep@claude-plugins-official

/plugin install semgrep@claude-plugins-official