Lorem ipsum dolor sit amet, consectetur adipiscing elit.
npx skills add https://github.com/MetalLegBob/drfraudsworth --skill codeql-metallegbob
Please help me install this Agent Skill. Skill: codeql Source: https://github.com/MetalLegBob/drfraudsworth/tree/main/.claude/skills/codeql Command: npx skills add https://github.com/MetalLegBob/drfraudsworth --skill codeql-metallegbob
CodeQL enables automated security analysis across codebases by identifying vulnerabilities, taint flows, and data leaks through language-aware queries and databases.
Initialize a CodeQL database for a language of your choice and run a security analysis with a single command.
High-intent search queries and answers about installing and using this skill.
You can identify security vulnerabilities and data-flow issues by creating CodeQL databases from your source code and running static-analysis queries to detect taint flows and data leaks.
Yes, you can integrate static-analysis queries into CI/CD workflows to continuously audit code changes and automatically generate security reports for your repositories.
You can write and customize CodeQL queries to detect specific security issues or enforce coding standards by applying language-aware dataflow and taint-tracking analysis to your databases.
Yes, you must have CodeQL installed and access to your source code to build language-specific databases and execute static-analysis queries for security audits.
CodeQL supports multi-language repositories by allowing you to create language-aware databases and run security queries across different codebases within your CI pipelines.
The best way to automate code security analysis is by creating CodeQL databases, writing custom queries, and integrating them into CI/CD pipelines to continuously audit code and generate reports.
andrescardonas7Perform static code analysis with CodeQL for security vulnerabilities and data flow.
balic-AI-ML-R-D-ResourcesAutomate security-focused code analysis with Semgrep across CI/CD pipelines.
jpoleyClassify security findings from Semgrep, CodeQL, and SARIF outputs.
framerslabScan LLM-generated code for injection, XSS, and security vulnerabilities.
