Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access.Detects project languages, selects rulesets, and presents a scan plan for approval before executing it. Supports full or prioritized security scans, produces merged SARIF output, and uses Semgrep Pro cross-file taint analysis when available.
Write custom Semgrep rules to identify organization-specific logic flaws, improper cryptography usage, or missing authorization checks during source code review. This skill focuses on moving beyond default rulesets to locate complex vulnerabilities.
Authors custom Semgrep static analysis rules. Targets security vulnerabilities, recurring bug patterns, and other specified code patterns.
Takes an existing Semgrep rule and a set of target languages to create language-specific variants. Produces an independent rule and test directory for each language.
Configures telemetry delivery through Prometheus remote write, OTLP, Loki, Alloy, and Pyroscope. Covers collector pipelines, direct SDK integrations, cloud integrations, ingestion method selection, and credentials management.
Reviews DXF and STEP/STP uploads against SendCutSend ordering guidance, catalog entries, and specifications. Checks material, SKU, thickness, service availability, and requirements for cutting, routing, bending, tapping, hardware insertion, and finishing.
Architects Sent Sender Profiles for multi-tenant, multi-brand, and multi-channel messaging systems. Covers API-key scoping, x-profile-id, resource inheritance and sharing, billing, WABA, 10DLC campaigns, webhooks, and tenant offboarding.
Helps evaluate microservices versus monoliths, database choices, scalability, and system design. Produces architecture decision records and diagrams in Mermaid, PlantUML, or ASCII, alongside technical stack and dependency analysis.
Guides architecture for web, mobile, backend, and database systems across multiple technology stacks. Includes architecture diagrams, design patterns, technology selection frameworks, dependency analysis, and integration tradeoffs.
Provides a toolkit for senior architecture work using modern tools and best practices. The description does not specify individual methods or technologies.
Builds and reviews backend systems using Node.js, Express, Fastify, and PostgreSQL. Covers REST and GraphQL APIs, query optimization, migrations, authentication, API security, architecture patterns, and API load testing.
Supports backend development using NodeJS, Express, Go, Python, Postgres, GraphQL, and REST. Covers business logic, API design, query optimization, authentication, authorization, and code review.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name