codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, and Swift. Supports "run all" (security-and-quality +…
npx degit trailofbits/skills/plugins/static-analysis/skills/codeql .claude/skills/codeqlRead this skill at its source
The repo doesn’t state an open license, so we link to it rather than showing the text here.
Open on GitHub