semgrep / cursor-plugin
A skill package that teaches your agent 1 capability — every one documented and browsable below, no GitHub required · by semgrep.
Each skill below is one capability this package teaches your agent. Install the whole package, or open a skill to install just that one.
Semgrep Cursor Plugin
This repo is where the Semgrep Cursor Plugin lives. The Semgrep Plugin includes a MCP server, hooks, and skills, which are used to scan agent-generated code for security vulnerabilities and provide recommendations for fixing them.
To use the Semgrep plugin:
-
Install the plugin from the Cursor Plugin Marketplace
-
Run the
/setup-semgrep-pluginskill.
Install the whole package (1 skills):
npx skills add https://github.com/semgrep/cursor-pluginOr install a single skill:
npx skills add https://github.com/semgrep/cursor-plugin --skill <name>Pick the skill name from the Skills tab — each entry there installs independently.