skills.rest
rauly-1408
rauly-1408COMMUNITY
Explore all skills by this author →
GitHub

codeql

Detect security vulnerabilities in source code using CodeQL data flow analysis.

Updated Jan 19, 2026
Search Tags:#static analysis#security analysis#vulnerability scanning#codeql#sarif#taint tracking
One-click install
npx skills add https://github.com/rauly-1408/order-saas --skill codeql-rauly-1408
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: codeql
Source: https://github.com/rauly-1408/order-saas/tree/main/.claude/skills/codeql
Command: npx skills add https://github.com/rauly-1408/order-saas --skill codeql-rauly-1408

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps security engineers identify complex vulnerabilities in codebases by running CodeQL analysis with validated database creation, data modeling, and security query workflows.

Core Features & Use Cases

  • Security Analysis: Scans supported languages using interprocedural data flow and taint tracking to uncover vulnerability patterns.
  • CodeQL Workflow Management: Builds databases, evaluates extraction quality, creates data extensions, and processes SARIF security results.
  • Use Case: Analyze a web application repository to detect insecure data flows, framework-specific risks, and high-priority security issues before deployment.

Quick Start

Use the codeql skill to run a complete security scan on this codebase and report important vulnerabilities.

Frequently Asked Questions about codeql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static analysis to find security vulnerabilities in my source code?▼

Static analysis detects security vulnerabilities by evaluating extraction quality and applying taint tracking across supported languages. It processes SARIF results to report high-priority security issues in your codebase.

What is taint tracking and how does it work for code security audits?▼

Taint tracking identifies vulnerability patterns by tracing insecure data flows across function boundaries during security audits. It evaluates extraction quality to ensure accurate detection of framework-specific risks.

How do I process SARIF security results from vulnerability scanning?▼

Processing SARIF security results involves evaluating the output from CodeQL vulnerability scanning workflows. This generates structured security-focused reports highlighting detected vulnerability patterns and insecure data flows.

Does CodeQL analysis require a specific database setup for my programming language?▼

Yes, CodeQL analysis requires generating a validated analysis database tailored to your programming language. This database setup is a prerequisite for accurate interprocedural data flow tracking and taint analysis.

Can I use this for vulnerability assessments on a web application repository?▼

Vulnerability assessments on a web application repository detect insecure data flows and framework-specific risks using CodeQL analysis. This reveals high-priority security issues and vulnerability patterns specific to your frameworks.

What are the limitations of static analysis for detecting complex code vulnerabilities?▼

Limitations of static analysis include its dependence on validated analysis databases and explicit query suites to track data flow effectively. Complex code vulnerabilities outside modeled data flows or supported languages may remain undetected.

Related Skills

Explore More Software Engineering Skills→
statick88statick88
1

codeql

Run CodeQL static analysis to detect security vulnerabilities and track data flow.

Community
Advanced
igbuendigbuend
8

sarif-issue-reporter

Analyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.

Community
Advanced
softmgsoftmg

github-workflow-automation

Automate GitHub Actions workflow generation and CI/CD pipeline management.

Official
Advanced
jikimejikime
5

jikime-tool-ast-grep

Perform AST-based code analysis, security scanning, and refactoring across 40+ languages.

Community
Advanced