skills.rest
zekiriabd
zekiriabdCOMMUNITY
Explore all skills by this author →
GitHub

codeql

Identify security vulnerabilities via CodeQL database construction and interprocedural data flow analysis.

140|20|Updated Jun 20, 2026
Search Tags:#static analysis#data flow#security scanning#vulnerability analysis#codeql#sarif#taint tracking
One-click install
npx skills add https://github.com/zekiriabd/SDD-Pro --skill codeql-zekiriabd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: codeql
Source: https://github.com/zekiriabd/SDD-Pro/tree/main/.sdd/skills/codeql
Command: npx skills add https://github.com/zekiriabd/SDD-Pro --skill codeql-zekiriabd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides thorough CodeQL security analysis for codebases, helping identify vulnerabilities that simple pattern matching and shallow scans can miss.

Core Features & Use Cases

  • Database Construction: Builds and validates CodeQL databases for interpreted and compiled languages using appropriate build strategies.
  • Deep Vulnerability Analysis: Runs explicit security query suites with interprocedural data flow and taint tracking across Python, JavaScript, TypeScript, Go, Java, Kotlin, C, C++, C#, Ruby, Swift, and related ecosystems.
  • Coverage Improvement: Detects project-specific sources and sinks, creates data extensions, processes SARIF results, and investigates zero-finding outcomes.
  • Use Case: Scan a Spring Boot, FastAPI, Node.js, or C++ application for SQL injection, command injection, path traversal, SSRF, XSS, unsafe deserialization, and other security issues while preserving diagnostics and reports in a dedicated output directory.

Quick Start

Ask the CodeQL skill to perform a full security scan of the current codebase and report verified findings with their SARIF output location.

Frequently Asked Questions about codeql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find deep security vulnerabilities like SQL injection or path traversal in my codebase?▼

Find deep security vulnerabilities by constructing a validated CodeQL database and running explicit query suites with interprocedural data flow and taint tracking analysis to detect complex code issues across supported languages.

Does CodeQL static analysis work with compiled languages like C++ and Java?▼

CodeQL static analysis works with compiled languages like C++ and Java, requiring appropriate language toolchains and build strategies to construct the validated database needed for deep interprocedural security scanning.

How to generate and evaluate a CodeQL database for a comprehensive security audit?▼

Generate a CodeQL database by applying appropriate build strategies for your project's language, then evaluate database quality and data extensions to ensure comprehensive security audit coverage before running query suites.

What is the best way to scan a Spring Boot or FastAPI application for unsafe deserialization and SSRF?▼

The best way to scan Spring Boot or FastAPI applications for SSRF and unsafe deserialization is running explicit CodeQL security query suites that apply interprocedural data flow and taint tracking across the codebase.

Why does my CodeQL scan return zero findings and how can I improve source and sink coverage?▼

CodeQL scans return zero findings when default models miss project-specific inputs, so you can improve coverage by detecting custom sources and sinks, creating data extensions, and investigating database quality.

How do I process SARIF results from a vulnerability analysis and store output artifacts?▼

Process SARIF results from vulnerability analysis by executing query suites and preserving the structured output artifacts and diagnostics in a dedicated directory for further review and reporting.

Related Skills

Explore More Software Engineering Skills→
jakubciszakjakubciszak
1

codeql

Identify security vulnerabilities in codebases using CodeQL static analysis.

Community
Advanced
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
AidenSbVevoAidenSbVevo
1

codeql

Scan codebases for security vulnerabilities using CodeQL data flow analysis.

Community
Advanced
manuelbrandner85manuelbrandner85

codeql

Scan software projects for security vulnerabilities using CodeQL data flow analysis.

Community
Advanced