semgrep-rule-creator

95 / 100 · Low risk

Fine to try.

By skrun-dev/skrun (GitHub) · coding · 209 stars · scanned at commit b1d963b

Generate a complete Semgrep rule bundle (rule.yml + tests.md + README.md) from a CVE description and a bad-code example. Picks an appropriate severity, infers the right CWE/OWASP mapping, and produces a ready-to-commit rule with documentation. Use when asked to draft a Semgrep rule, encode a security pattern, or productize a security finding for the codebase.

Works with any agent that supports SKILL.md skills.

What this skill can do

Connects to the internet

The author does not mention this.

Found in 9 places.

agents/semgrep-rule-creator/README.md, line 30curl -X POST http://localhost:4000/api/agents/dev/semgrep-rule-creator/run \
agents/semgrep-rule-creator/README.md, line 36"cve_description": "Server-Side Request Forgery via user-controlled URL passed directly to fetch() without allowlist validation.",
agents/semgrep-rule-creator/README.md, line 37"bad_code_example": "const url = req.query.url; const res = await fetch(url); res.send(await res.text());",

Show 6 more

agents/semgrep-rule-creator/README.md, line 48curl http://localhost:4000/api/runs/<run_id>/files/rule.yml \
agents/semgrep-rule-creator/README.md, line 50curl http://localhost:4000/api/runs/<run_id>/files/tests.md \
agents/semgrep-rule-creator/README.md, line 52curl http://localhost:4000/api/runs/<run_id>/files/README.md \
agents/semgrep-rule-creator/agent.yaml, line 84const res = await fetch(url);
agents/semgrep-rule-creator/fixtures/sample-cve.md, line 31const result = await fetch(url);
agents/semgrep-rule-creator/fixtures/sample-cve.md, line 48const result = await fetch(url);

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'semgrep-rule-creator' ] || [ -L ~/.agents/skills/'semgrep-rule-creator' ]; then echo 'A skill folder named semgrep-rule-creator already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/skrun-dev/skrun' "$d" && git -C "$d" checkout --quiet 'b1d963b36174c159cad07fe91cef0b3c7bbdb7d7' -- 'agents/semgrep-rule-creator' && mkdir -p ~/.agents/skills && cp -R "$d"/'agents/semgrep-rule-creator' ~/.agents/skills/'semgrep-rule-creator' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'semgrep-rule-creator' ~/.claude/skills/'semgrep-rule-creator' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for skrun-dev/skrun shows the score of its lowest-scoring skill.

SkillTrust badge for skrun-dev/skrun

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/skrun-dev/skrun.svg)](https://zalavijaysinh.github.io/skilltrust/repos/skrun-dev/skrun/)

Score history

Date	Version	Score
2026-11-07	`b1d963b`	100