code-security
code-security is an agent skill published by semgrep, listed under review & testing. It lives in the semgrep/skills repository, which has 332 GitHub stars and is licensed under NOASSERTION; we last read it on 2026-09-16.
Provides security guidelines for writing and reviewing code, particularly for handling user input, authentication, file operations, database queries, network requests, cryptography, and infrastructure configuration. Requires no specific credentials.
Install
skills is a generic installer for any repository of Claude agent skills -- it reads semgrep/skills’s own structure rather than assuming one, the same way this page reads the skill’s own SKILL.md rather than assuming a format.
npx skills add semgrep/skills
Maintenance
Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for SQL injection' or 'review security'. IMPORTANT: Always consult this skill when writing or reviewing any code that handles user input, authentication, file operations, database queries, network requests, cryptography, or infrastructure configuration (Terraform, Kubernetes, Docker, GitHub Actions) — even if the user doesn't explicitly mention security. Also use when users ask to 'review my code', 'check this for bugs', or 'is this safe'.
code-security compared with similar skills
| Skill | Publisher | What it does | Repo stars | Last update |
|---|---|---|---|---|
| code-security (this page) | semgrep | Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or as… | 332 | 2026-07-28 |
| semgrep(same repository) | semgrep | Run Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep… | 332 | 2026-07-28 |
| code-review | mattpocock | Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standards (does t… | 303,549 | 2026-10-22 |
| scaffold-exercises | mattpocock | Create exercise directory structures with sections, problems, solutions, and explainers that pass linting. Us… | 303,549 | 2026-10-22 |
| tdd | mattpocock | Test-driven development. Use when the user wants to build features or fix bugs test-first, mentions "red-gree… | 303,549 | 2026-10-22 |
| webapp-testing | anthropic | Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend… | 183,845 | 2026-10-09 |
| browser-testing-with-devtools | addyosmani | Tests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browse… | 110,611 | 2026-10-13 |
Skills from the same repository first, then others for this job by repository stars. Figures are from each repository when we last read it.
Common questions about code-security
- What does code-security do?
- Provides security guidelines for writing and reviewing code, particularly for handling user input, authentication, file operations, database queries, network requests, cryptography, and infrastructure configuration. Requires no specific credentials.
- How do I install code-security?
- Run npx skills add semgrep/skills. The skills installer reads the repository’s own structure, so it works for any repository of agent skills.
- Who publishes code-security?
- semgrep.
- Is code-security maintained, and what licence does it use?
- Its repository has 332 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-07-28. The repository declares the NOASSERTION licence.
More agent skills for review & testing
- browser-testing-with-devtoolsby addyosmani
- code-review-and-qualityby addyosmani
- code-simplificationby addyosmani
- doubt-driven-developmentby addyosmani
- vitestby antfu
- webapp-testingby anthropic