← Browse
semgrep
semgrep ★ 12
Semgrep Guardian scans agent-generated code for security vulnerabilities using hooks that intercept tool execution and session events. The plugin integrates with an MCP server and shell execution to analyze code patterns and surfaces potential security issues in real time.
Install
> /plugin marketplace add semgrep/mcp-marketplace/tree/HEAD/plugin
> /plugin install semgrep
Source: https://github.com/semgrep/mcp-marketplace/tree/HEAD/plugin
What it's made of
1 skill · 1 MCP server · 6 hooks
- Commands
- 0
- Agents
- 0
- Skills
- 1
- MCP servers
- 1
- Hooks
- 6 · PostToolUse, PreToolUse, SessionEnd, SessionStart, Stop
What it needs & plugs into
- API keys
- none
- Paid services
- none detected
- External tools
hook- Talks to
- nothing external detected
Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (semgrep).