home/categories/code-quality/graysurf-codex-kit-skills-automation-semgrep-find-and-fix-skill-md
code-qualitytesting-security

semgrep-find-and-fix

Scan a repo using its checked-in Semgrep configuration (local rules only), triage findings, and either fix the most severe issues or open a report-style PR. Use when a repo already has Semgrep config and rules committed; stop if no Semgrep config is present.

graysurf
maintainer
graysurf
Updated 1/20/2026
Stars
0
Forks
0
quick start

Installation and usage

Scan a repo using its checked-in Semgrep configuration (local rules only), triage findings, and either fix the most severe issues or open a report-style PR. Use when a repo already has Semgrep config and rules committed; stop if no Semgrep config is present.

Installation
$ install --globalskills.sh
Usage

Once installed, you can use this skill by running the following command in your terminal:

skills use semgrep-find-and-fix