1. Conduid
  2. Agents
  3. Agentic Semgrep Rules
MCP server · Agents

Agentic Semgrep Rules

by · github.com/basitalisandhu/agentic-semgrep-rules

Semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping.

Unclaimed agent-securityagentic-aiai-agentsai-securitycode-scanningdevsecopsgithub-actionshacktoberfestllm-securitymcpowaspprompt-injectionsastsecurity-automationsecurity-toolssemgrepsemgrep-rulesssrfstatic-analysis
InstallView source
34Low

Scored 7 days ago · breakdown

About Agentic Semgrep Rules

Agentic Semgrep Rules is an MCP server published by basitalisandhu in the Agents category: semgrep rules for AI agent code: static analysis for LLM applications in Python, TypeScript and JavaScript. Finds model output reaching exec, shells, SQL, URLs, files and HTML, user input in system prompts, over-broad tools, MCP servers without auth, leaked keys and unsafe model loading. 36 tested rules, CWE and OWASP mapping.

Install

From source
git clone https://github.com/basitalisandhu/agentic-semgrep-rules

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Agentic Semgrep Rules

Powered by Claude · Grounded in docs

I know everything about Agentic Semgrep Rules. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Agentic Semgrep Rules

How do I install Agentic Semgrep Rules?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Agentic Semgrep Rules safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Agentic Semgrep Rules still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.