yellow-semgrep

Plugin yellow-semgrep from marketplace yellow-plugins in KingInYellows/yellow-plugins. Commands read from the repo's manifest — today.

Skills (1)

• semgrep-conventions

  Shared conventions for Semgrep integration — triage state mappings, API patterns, fix strategy decision tree, rate limits, and security rules. Use when commands or agents need Semgrep-specific validation, error handling, or API reference.

Slash commands (5)

• /yellow-semgrep:semgrep:fix-batch

  Fix multiple 'to-fix' Semgrep findings with human approval between each fix. Use when user says 'fix all findings', 'batch fix', 'remediate everything', or wants to work through the to-fix queue.

• /yellow-semgrep:semgrep:fix

  Fix a single Semgrep finding: fetch details, analyze vulnerability, apply fix (autofix or LLM), verify via re-scan, and update triage state. Use when user says 'fix finding 12345', 'remediate this issue', or references a specific finding ID.

• /yellow-semgrep:semgrep:scan

  Run local Semgrep scan and compare results with platform findings. Use when user says 'scan for issues', 'check security', 'run semgrep', or wants to verify local code against the Semgrep platform.

• /yellow-semgrep:semgrep:setup

  Validate SEMGREP_APP_TOKEN, test MCP connection, detect deployment slug, and cache configuration. Use when first installing the plugin, after token rotation, or on auth errors.

• /yellow-semgrep:semgrep:status

  Show findings dashboard grouped by triage state and severity. Use when user asks 'semgrep status', 'what needs fixing', 'how many findings', or wants to see the current state of security findings.

MCP servers (1)

• semgrep

  runs: ${CLAUDE_PLUGIN_ROOT}/bin/start-semgrep.sh

Hooks (1)

• SessionStart

  bash "${CLAUDE_PLUGIN_ROOT}/hooks/write-credential-status.sh"

Similar plugins