Skill
Semgrep Rule Creator
trailofbits
Authors a custom Semgrep static-analysis rule for one specific bug or vulnerability pattern - building the match (or a taint-mode source-to-sink data flow), then the paired vulnerable-and-safe test cases that keep false positives in check. Its output is a reusable detection rule, not a finished audit: it does not run existing Semgrep rulesets over your repo, triage the findings a scan produces, or review a diff by hand.
A situation it fits
At a security audit you discover your app mishandles a proprietary protocol in a way command-line scanners default ignore. You need to codify a narrowly scoped gatekeeper with paired illustrations to avoid noisy CI runs.Skills it gets confused with
These share a family with Semgrep Rule Creator, which is another way of saying they are the ones you might reach for by mistake.
- Dependency UpdaterWorks over a project's dependency manifest - detecting the language, applying the safe…
- Secure Error HandlingA secure-coding pattern for the error path: return generic, environment-aware messages to…
- Security Review (affaan-m)Helps developers implement secure features by listing concrete checks and recommended…Semgrep Rule Creator vs Security Review (affaan-m), side by side
- Security Review (Sentry)Hunts only for exploitable security holes - injection, XSS, broken auth, weak crypto…
- Security Review (waybarrios)Inspects the unmerged commits on a branch and calls out concrete security problems that…Semgrep Rule Creator vs Security Review (waybarrios), side by side
- Security ReviewerPerforms end-to-end security examinations of code, infrastructure, dependencies and…
Every comparison with Semgrep Rule Creator
Knowing what Semgrep Rule Creator does is the easy half. Telling it apart from the others under time pressure is the game.
Today's sessionSemgrep Rule Creator is part of trailofbits/skills. Licence: CC-BY-SA-4.0. The description above was written for this game, not taken from the skill.