semgrep-rule-variant-creator

仓库创建 2026年1月15日最近提交 10 小时前SkillHot 收录 21 天前

▸ 精选理由

方便扩展规则覆盖范围，确保跨语言的一致检测能力。

这个 Skill 做什么

将现有 Semgrep 规则移植到指定目标语言并生成独立规则与测试目录。

把现有的 Semgrep 规则移植到目标语言，生成每种语言独立的规则和测试目录，方便在多语言项目中复用。适合扩展漏洞检测覆盖或把通用模式落地到具体语言时用。它不仅翻译规则，还做适用性分析并附带测试验证，减少移植后的误报和漏报。

▸ 展开 SKILL.md 英文原文

Creates language variants of existing Semgrep rules. Use when porting a Semgrep rule to specified target languages. Takes an existing rule and target languages as input, produces independent rule+test directories for each language.

开发编程Semgrep规则迁移多语言通用

6.3k

Stars

543

Forks

仓库内 Skill

+282

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/semgrep-rule-variant-creator/skills/semgrep-rule-variant-creator/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Semgrep Rule Variant Creator

Port existing Semgrep rules to new target languages with proper applicability analysis and test-driven validation.

## When to Use

**Ideal scenarios:**
- Porting an existing Semgrep rule to one or more target languages
- Creating language-specific variants of a universal vulnerability pattern
- Expanding rule coverage across a polyglot codebase
- Translating rules between languages with equivalent constructs

## When NOT to Use

Do NOT use this skill for:
- Creating a new Semgrep rule from scratch (use `semgrep-rule-creator` instead)
- Running existing rules against code
- Languages where the vulnerability pattern fundamentally doesn't apply
- Minor syntax va

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有