跳转到主要内容
此内容尚未提供您的语言版本,正在以英文显示。

Semgrep Rule Variant Creator

技能 活跃

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.

目的

To efficiently and reliably port existing Semgrep rules to new target languages, ensuring accuracy and test coverage through a structured, multi-phase workflow.

功能

  • Automated Semgrep rule variant creation
  • Test-driven development for new rule variants
  • Applicability analysis for target languages
  • Generates independent rule and test directories
  • Detailed documentation and workflow guidance

使用场景

  • Porting a Semgrep rule written in Python to Go and Java
  • Expanding security rule coverage across a polyglot codebase
  • Creating language-specific versions of a universal vulnerability pattern
  • Ensuring new rule variants have proper test cases

非目标

  • Creating a new Semgrep rule from scratch
  • Running existing Semgrep rules against code
  • Translating rules for languages where the vulnerability pattern doesn't apply
  • Skipping test case creation for new variants

Trust

  • warning:Issues AttentionIn the last 90 days, 13 issues were opened and 4 were closed, indicating a low closure rate (approximately 24%), suggesting maintainers may respond slowly to issues.

安装

请先添加 Marketplace

/plugin marketplace add trailofbits/skills
/plugin install semgrep-rule-variant-creator@trailofbits

质量评分

95 /100
about 24 hours ago 分析

信任信号

最近提交3 days ago
星标5.2k
许可证CC-BY-SA-4.0
状态
查看源代码

类似扩展

Cleanup Cycles

100

Detect and untangle circular dependencies. Runs madge/skott (TS), pycycle (Py), or compiler-only checks (Go/Rust). Auto-fixes leaf-extractable cycles; reports core cycles for human review. Use when the user asks to find circular imports, fix dependency cycles, or untangle module graph. Example queries — "find circular imports", "fix dependency cycles", "untangle our module graph", "why is madge complaining".

技能
raintree-technology

Coding Standards

100

Baseline cross-project coding conventions for naming, readability, immutability, and code-quality review. Use detailed frontend or backend skills for framework-specific patterns.

技能
affaan-m

Create Dockerfile

98

Create general-purpose Dockerfiles for Node.js, Python, Go, Rust, and Java projects. Covers base image selection, dependency installation, user permissions, COPY patterns, ENTRYPOINT vs CMD, and .dockerignore. Use when containerizing an application for the first time, creating a consistent build/runtime environment, preparing an app for cloud deployment or Docker Compose, or when no existing Dockerfile is present in the project.

技能
pjt222

Metal

100

Extract the conceptual essence of a repository as skills, agents, and teams — the project's roles, procedures, and coordination patterns expressed as agentskills.io-standard definitions. Reads an arbitrary codebase and produces generalized definitions that capture WHAT the project does and WHO operates it, without replicating HOW it does it. Use when onboarding to a new codebase and wanting to understand its conceptual architecture, when bootstrapping an agentic system from an existing project, when studying a project's organizational DNA for cross-pollination, or when creating a skill/agent/team library inspired by a reference implementation.

技能
pjt222

Lean Ctx

100

AI 代理的上下文运行时 — 包含 59 个 MCP 工具、10 种读取模式、95+ 种 shell 模式、支持 18 种语言的 tree-sitter AST。将 LLM 上下文压缩高达 99%。用于读取文件、运行 shell 命令、搜索代码或探索目录。如果不存在,则自动安装。

技能
yvgude

Pathfinder

100

将代码库映射为按功能分组的流程图,识别不同功能之间的重复关注点,并提出统一的架构。在被要求“寻找理想路径”、统一重复系统或在重构前审计架构时使用。输出一个建议的统一流程图以及针对每个系统的“制定计划”提示。

技能
thedotmack