🔍
QualityRust

Semgrep Triage

by deonmenezes

Semgrep Triage is a Quality skill for Claude Code, published by deonmenezes in mantishack.

490 stars73 forkson deonmenezes/mantishackAdded 2026/08/26Repository updated 2026/08/11
View source on GitHubDownload repo ZIP
agent-harnessai-agentsautonomous-agentsbug-bountyclaude-codemantismcpoffensive-securitysecurity
Install in seconds
Install Semgrep Triage
Copy Semgrep Triage into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/deonmenezes/mantishack/tree/main/.codex/skills/semgrep-triage ~/.claude/skills/semgrep-triage

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/deonmenezes/mantishack.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file
.codex/skills/semgrep-triage/SKILL.md in deonmenezes/mantishack
Installs to
~/.claude/skills/semgrep-triage
Collection
One of 25 skills cataloged from this repository
Category
Quality — 1354 skills

What Semgrep Triage does

Semgrep Triage runs Semgrep through the mantis_semgrep MCP server to detect potential issues in code. It is used to review candidates, verify reachability, and decide whether results should be confirmed or rejected.

Semgrep Triage is cataloged under Quality on DirSkills. Semgrep Triage comes from a repository tagged agent-harness, ai-agents, autonomous-agents, bug-bounty and claude-code.

Documentation

README

Use the semgrep_scan tool (mantis_semgrep MCP server) for the Detect stage of the Mantis pipeline: high-recall SAST over a file or directory.

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Semgrep Triage

  • What else does deonmenezes publish alongside Semgrep Triage?

    Semgrep Triage is one of 25 skills that DirSkills catalogs from deonmenezes/mantishack, the repository it ships in. Its siblings there include Canary Tripwire Response, Code Breaking Changes and Code Review. Each one is a separate skill with its own page in this directory, installs the same way Semgrep Triage does, and is maintained by deonmenezes in that same repository. The rest of the collection is listed on the deonmenezes/mantishack page.

  • How does Semgrep Triage compare to other Quality skills?

    Semgrep Triage ranks #1252 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Semgrep Triage against them. Open each page to compare what they document and how they install.

More from deonmenezes/mantishack

Semgrep Triage is one of 25 skills cataloged on DirSkills from deonmenezes/mantishack.

See all 25 skills →
🚨
5d ago

Canary Tripwire Response

Canary Tripwire Response tells you how to react if a mantis_canary decoy tool is mentioned or called. It treats the event as a security incident, preserves evidence, and stops normal execution.
AI Engineering
49073
⚠️
5d ago

Code Breaking Changes

Code Breaking Changes searches external integration surfaces for breaking changes in app-server APIs, CLI parameters, configuration loading, and session resuming. Use it when reviewing changes for compatibility risks across these interfaces.
Quality
49073
🔎
5d ago

Code Review

Code Review runs a final review on a pull request by delegating to other code-review subagents and collecting their findings. Use it to surface every issue with file paths and line numbers before merging.
Quality
49073
🧩
5d ago

Code Review Change Size

Code Review Change Size sets limits for how many lines a change should touch and asks for staged delivery when a diff is too large. Use it to judge whether a change is reviewable in one pass or should be split.
Quality
49073
🧩
5d ago

Code Review Context

Code Review Context defines constraints for building model context incrementally, with bounded fragments and hard caps. Use it when reviewing changes that inject visible context into Codex requests.
Quality
49073
🧪
5d ago

Code Review Testing

Code Review Testing gives guidance for authoring tests for agent changes, with a preference for integration tests in core/suite. It is used when changes affect agent logic and need readable, maintainable test coverage.
Quality
49073

More Quality skills

Semgrep Triage is one of 1354 Quality skills cataloged on DirSkills, ranked #1252 by stars among them.

Browse all Quality skills →
⏱️
3w ago

Benchmark

Benchmark measures performance baselines, detects regressions before and after PRs, and compares stack alternatives for pages, APIs, and builds.
Quality
239.8K36.4K
⏱️
3w ago

Benchmark Optimization Loop

Benchmark Optimization Loop turns vague performance goals into a bounded, measured optimization process. Use it when asked to make something faster, benchmark latency/throughput/cost, or choose the best implementation by repeated measured tests.
Quality
239.8K36.4K
🔌
3w ago

API Design Patterns

API Design Patterns provides conventions and best practices for designing consistent REST APIs. Use it when creating endpoints, reviewing contracts, handling pagination, error responses, status codes, filtering, or versioning.
Quality
239.8K36.4K