skills.rest
rohanbhatia27
rohanbhatia27COMMUNITY
Explore all skills by this author →
GitHub

codeql

Analyze codebases for security vulnerabilities using CodeQL data flow and taint tracking.

1|Updated Apr 7, 2026
Search Tags:#code analysis#security scanning#vulnerability detection#codeql#database scanning
One-click install
npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill codeql-rohanbhatia27
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: codeql
Source: https://github.com/rohanbhatia27/rohanstutoring-redesign/tree/main/.agents/skills/codeql
Command: npx skills add https://github.com/rohanbhatia27/rohanstutoring-redesign --skill codeql-rohanbhatia27

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill scans your codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis, identifying potential security issues.

Core Features & Use Cases

  • CodeQL Analysis: Perform comprehensive security scans using CodeQL's query packs.
  • Database Creation: Build a CodeQL database from your source code.
  • Data Extensions: Generate data extension models for project APIs to improve analysis.
  • Analysis Modes: Supports "run all" and "important only" scan modes.
  • Use Case: Ideal for conducting security audits and ensuring your codebase is free from known vulnerabilities.

Quick Start

Use the codeql skill to scan your codebase for vulnerabilities.

Frequently Asked Questions about codeql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities using CodeQL?▼

CodeQL security scanning builds a database from your source code, then uses interprocedural data flow and taint tracking to identify potential vulnerabilities across multiple languages. You can run comprehensive scans or focus on important findings using different analysis modes.

What is interprocedural data flow analysis for vulnerability detection?▼

Interprocedural data flow analysis tracks how data moves across function boundaries to detect security vulnerabilities. It traces tainted data from untrusted sources through your codebase to sensitive sinks, identifying potential security issues.

Do I need a CodeQL database before running security analysis?▼

Yes, security vulnerability analysis requires a CodeQL database built from your source code. The Skill supports database creation and can also generate data extension models for project APIs to improve analysis accuracy.

Can I use CodeQL taint tracking across multiple programming languages?▼

Yes, CodeQL vulnerability detection supports security scanning across multiple languages. The analysis uses query packs and model packs to identify potential security issues through interprocedural taint tracking.

What's the best way to focus on critical security findings during code analysis?▼

CodeQL analysis supports two scan modes: "run all" for comprehensive vulnerability detection and "important only" to focus on critical security issues. You can choose the mode that fits your security audit needs.

Related Skills

Explore More Software Engineering Skills→
FlorianBruniauxFlorianBruniaux
77

codeql

Scan codebases for security vulnerabilities using CodeQL data flow analysis.

Community
Intermediate
maddhruvmaddhruv
207

absolute-audit

Scan codebases for security vulnerabilities in dependencies and code.

Community
Advanced
duanbiao2000duanbiao2000
3

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Advanced
drgaciwdrgaciw

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Intermediate