{"slug":"trailofbits-semgrep","source_name":"trailofbits/semgrep","name":"Trailofbits/Semgrep","description":"Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — \"run all\" (full ruleset coverage) and \"important only\" (high-confidence security vulnerabilities). Automatically detects and uses Semgrep Pro for cross-file taint analysis when available. Use when asked to scan code for vulnerabilities, run a security audit with Semgrep, find bugs, or perform static analysis. Spawns parallel workers for multi-language codebases.","version":1,"lift":{"pass_rate_delta_pts":18.18,"pass_rate_pct":50,"total_cases":22,"passed_cases":11,"tokens_delta_pct":99,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-10T01:01:32.842806+00:00"},"skill_score":0.5,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":18.18,"with_pass_pct":50,"without_pass_pct":31.8,"tokens_delta_pct":99,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":18,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-10T01:01:32.842806+00:00","run_id":"992bed5f-c190-4b88-ae2e-9bf8a11ba13a","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"CC-BY-SA-4.0","install_count":0,"manifest_hash":"ee125442bdf1d0e732f4b1514747f03212c941b28563e9217e984a2c5eced1c9","raw_url":"https://app.decimal.ai/s/trailofbits-semgrep/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/trailofbits-semgrep"}