codeql

Identify security vulnerabilities via CodeQL database construction and interprocedural data flow analysis.

140|20|Updated Jun 20, 2026

Search Tags:#static analysis #data flow #security scanning #vulnerability analysis #codeql #sarif #taint tracking

Ready to run

npx skills add https://github.com/zekiriabd/SDD-Pro --skill codeql-zekiriabd

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: codeql
Source: https://github.com/zekiriabd/SDD-Pro/tree/main/.sdd/skills/codeql
Command: npx skills add https://github.com/zekiriabd/SDD-Pro --skill codeql-zekiriabd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides thorough CodeQL security analysis for codebases, helping identify vulnerabilities that simple pattern matching and shallow scans can miss.

Core Features & Use Cases

Database Construction: Builds and validates CodeQL databases for interpreted and compiled languages using appropriate build strategies.
Deep Vulnerability Analysis: Runs explicit security query suites with interprocedural data flow and taint tracking across Python, JavaScript, TypeScript, Go, Java, Kotlin, C, C++, C#, Ruby, Swift, and related ecosystems.
Coverage Improvement: Detects project-specific sources and sinks, creates data extensions, processes SARIF results, and investigates zero-finding outcomes.
Use Case: Scan a Spring Boot, FastAPI, Node.js, or C++ application for SQL injection, command injection, path traversal, SSRF, XSS, unsafe deserialization, and other security issues while preserving diagnostics and reports in a dedicated output directory.

Quick Start

Ask the CodeQL skill to perform a full security scan of the current codebase and report verified findings with their SARIF output location.

Frequently Asked Questions about codeql

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find deep security vulnerabilities like SQL injection or path traversal in my codebase?▼

Find deep security vulnerabilities by constructing a validated CodeQL database and running explicit query suites with interprocedural data flow and taint tracking analysis to detect complex code issues across supported languages.

Does CodeQL static analysis work with compiled languages like C++ and Java?▼

CodeQL static analysis works with compiled languages like C++ and Java, requiring appropriate language toolchains and build strategies to construct the validated database needed for deep interprocedural security scanning.

How to generate and evaluate a CodeQL database for a comprehensive security audit?▼

Generate a CodeQL database by applying appropriate build strategies for your project's language, then evaluate database quality and data extensions to ensure comprehensive security audit coverage before running query suites.

What is the best way to scan a Spring Boot or FastAPI application for unsafe deserialization and SSRF?▼

The best way to scan Spring Boot or FastAPI applications for SSRF and unsafe deserialization is running explicit CodeQL security query suites that apply interprocedural data flow and taint tracking across the codebase.

Why does my CodeQL scan return zero findings and how can I improve source and sink coverage?▼

CodeQL scans return zero findings when default models miss project-specific inputs, so you can improve coverage by detecting custom sources and sinks, creating data extensions, and investigating database quality.

How do I process SARIF results from a vulnerability analysis and store output artifacts?▼

Process SARIF results from vulnerability analysis by executing query suites and preserving the structured output artifacts and diagnostics in a dedicated directory for further review and reporting.