semgrep

How to start

1. Paste the command into Claude Code and press Enter.
2. Restart Claude Code so the plugin loads.
3. Just ask Claude. Its skills step in when your request fits.

What it adds

3 skills · 5 hooks · 1 MCP server

Skills Claude loads these when the task fits

• add-and-validate-guardian-developer-semgrep-rulewrite a custom semgrep rule with the user, add it to guardian in either user or repo scope, and prove it fires by writing a file that should trip it. use when…
• install-mfwInstall the mfw (Semgrep Malware Firewall) CLI via the curl|sh installer and walk the user through setup — trust store, PATH shims, shell integration, and the…
• remove-guardian-developer-semgrep-ruleRemove a custom Semgrep rule from Guardian — list what is installed, work out which file holds the rule, and delete or edit it out of the user or repo rules di…

Hooks Run on their own at these moments

• PreToolUseBefore Claude uses a tool.
• PostToolUseAfter Claude uses a tool.
• SessionStartWhen a session starts.
• StopWhen Claude finishes a reply.
• SessionEndWhen a session ends.

MCP servers Connections it sets up for you

• guardianRuns locally with ${CLAUDE_PLUGIN_ROOT}/scripts/hook

Read from the plugin's own files in semgrep/mcp-marketplace, 26 Oct 2026.

What it needs

No keys or settings: its files ask for none.