Command
Security
Command
/semgrep-rule
Creates Semgrep rules with test-first methodology
Install
> /plugin marketplace add trailofbits/skillsHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/semgrep-rule
Context preview
What this command does when you run it.
Creates Semgrep rules with test-first methodology
Command definition
semgrep-rule.mddescription: Creates Semgrep rules with test-first methodology argument-hint: "(uses conversation context for detection pattern)" allowed-tools: Bash Read Write Edit Glob Grep WebFetch
Create Semgrep Rule
**Arguments:** $ARGUMENTS
This command is context-driven. Use conversation context to understand: 1. The vulnerability or pattern to detect 2. The target language 3. Whether taint mode is appropriate
If context is unclear, ask for a description of the pattern to detect.
Invoke the `semgrep-rule-creator` skill for the full workflow.
Ships withtrailofbits-skills
A Claude Code plugin marketplace from Trail of Bits providing skills to enhance AI-assisted security analysis, testing, and development workflows. Codex can load this marketplace through its Claude marketplace compatibility.
Get the whole plugin
Other commands on trailofbits-skills.
Command
Command
Command
Command
Command
git-cleanup
Safely analyzes and cleans up local git branches and worktrees, categorizing them as merged, squash-merged, superseded, or active work before deleting anything.
@trailofbitsView Command