codeql

github:trailofbits/skills · first committed 2026-01-15 · source · badge

Run CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis. Use when asked to analyze code with CodeQL, create CodeQL databases, write custom QL queries, perform security audits, or set up CodeQL in CI/CD pipelines.

Skill Health: not yet scored

Listed, not yet scored. This skill has no public model test yet. It is in the scoring queue; submitted skills go first, then the most-installed.

Version history

6 commits to this file on GitHub (newest first).

2026-08-11 · commit 304c81a · static-analysis: make the codeql skill's guards real and add tests (#225)
2026-04-28 · commit debfb29 · Fix `allowed-tools` to use spec-compliant space-delimited strings (#139)
2026-04-01 · commit 17ba9fa · Sast improve (#119)
2026-02-26 · commit 8f92c6d · Simpler sast (#104)
2026-02-06 · commit f821e35 · codeql skills merge and improve (#67)
2026-01-15 · commit 4f5139d · Add static-analysis plugin from internal repo (#3)

Archived snapshots