semgrep-rule-creator
Create production-quality Semgrep rules for security and code quality using a test-driven, iterative workflow.
Install
npx skills add https://github.com/trailofbits/skills --skill semgrep-rule-creatorStats
| Total installs | 1,229 |
| Weekly installs | 1.2K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Guides iterative rule authoring: analyze problem, write tests first, inspect AST structure, build patterns, validate with semgrep --test, then optimize
- Prioritizes taint mode for data flow vulnerabilities (sources to sinks) over pattern matching to reduce false positives; supports switching between approaches as needed
- Enforces strict testing discipline: 100% test pass required, safe cases must be included to catch false positives, no untested rules
- Generates two-file output per rule: YAML rule definition and language-specific test file with ruleid and ok annotations
Tags
Related skills
| Skill | Installs | vs semgrep-rule-creator |
|---|---|---|
| guidelines-advisor | 1,289 | +60 |
| security-reviewer | 1,336 | +107 |
| entry-point-analyzer | 1,266 | +37 |
| verification-loop | 1,343 | +114 |
| substrate-vulnerability-scanner | 1,173 | -56 |
FAQ
- How many installs does semgrep-rule-creator have?
- semgrep-rule-creator has 1,229 total installs and 1.2K installs this week.
- Where is semgrep-rule-creator hosted?
- semgrep-rule-creator is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does semgrep-rule-creator have?
- semgrep-rule-creator has 4.0K GitHub stars.
- When was semgrep-rule-creator first indexed?
- OrangeBot.AI first indexed semgrep-rule-creator on Jan 19, 2026.
- How do I install semgrep-rule-creator?
- Run: npx skills add https://github.com/trailofbits/skills --skill semgrep-rule-creator