codeql

Name: codeql
Availability: InStock
Author: manuelbrandner85

Scan software projects for security vulnerabilities using CodeQL data flow analysis.

Updated Nov 23, 2025

Search Tags:#static analysis #security #vulnerability #audit #codeql #taint tracking

Ready to run

npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill codeql-manuelbrandner85

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: codeql
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/codeql
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill codeql-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires codeql-cli, jq, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates complex security audits by performing interprocedural data flow and taint tracking analysis, identifying vulnerabilities that standard pattern-matching tools often miss.

Core Features & Use Cases

Deep Vulnerability Scanning: Detects complex security flaws like SQL injection, command injection, and path traversal using semantic code analysis.
Customizable Analysis: Supports multiple scan modes, including high-precision "important-only" checks and comprehensive "run-all" audits.
Use Case: Use this to perform a full security audit on a new repository, ensuring that custom API wrappers and project-specific data paths are properly modeled and analyzed for potential exploits.

Quick Start

Use the codeql skill to perform a full security scan on this codebase and report any high-precision vulnerabilities found.

Frequently Asked Questions about codeql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find complex security vulnerabilities that pattern-matching static analysis tools miss?▼

Interprocedural data flow and taint tracking analysis detects complex security vulnerabilities like SQL injection and path traversal by modeling custom API wrappers and semantic code paths. This semantic approach identifies flaws that standard pattern-matching tools often miss.

How do I perform a deep security audit on a new codebase using CodeQL?▼

To perform a deep security audit, you create a CodeQL database for your project and execute multi-suite queries. You can run comprehensive audits or focus on high-precision checks to identify vulnerabilities across various programming languages.

Do I need the CodeQL CLI installed to run interprocedural taint tracking scans?▼

Yes, the CodeQL CLI is a required dependency for running interprocedural taint tracking scans. You also need jq installed to support the automation scripts that execute the static analysis pipeline and process the vulnerability results.

Can I customize static analysis to only report high-precision security vulnerabilities?▼

Yes, customizable analysis supports multiple scan modes including high-precision important-only checks and comprehensive run-all audits. This allows you to validate custom data paths and focus on the most critical vulnerabilities without noise.

What is the best way to model custom API wrappers for vulnerability detection in static analysis?▼

Custom data extension modeling allows you to define how project-specific API wrappers handle data flow. This ensures the taint tracking analysis accurately maps your custom data paths and detects potential exploits within your specific codebase logic.