Skip to the content
Agent Tools

Semgrep Guardian

Partner, reviewed

Semgrep Guardian: Scans agent-generated code for security vulnerabilities.

Plugin · by semgrep · runs in Claude Code, Cowork, claude.ai · 3 skills, 1 MCP server, 5 hooks · listed 2026-03-10

Claude Code

claude plugin install semgrep-guardian

Source

Skills (3)

  • Skill add-and-validate-guardian-developer-semgrep-rule

    write a custom semgrep rule with the user, add it to guardian in either user or repo scope, and prove it fires by writing a file that should trip it.

    Any agent

    npx skills add semgrep/mcp-marketplace --skill add-and-validate-guardian-developer-semgrep-rule

  • Skill install-mfw

    Install the mfw (Semgrep Malware Firewall) CLI via the curl|sh installer and walk the user through setup — trust store, PATH shims, shell integration, and the background daemon — asking questions at…

    Any agent

    npx skills add semgrep/mcp-marketplace --skill install-mfw

  • Skill remove-guardian-developer-semgrep-rule

    Remove a custom Semgrep rule from Guardian — list what is installed, work out which file holds the rule, and delete or edit it out of the user or repo rules directory.

    Any agent

    npx skills add semgrep/mcp-marketplace --skill remove-guardian-developer-semgrep-rule

From Anthropic's public plugin directory, read on 2026-10-15. Find a skill by task.