codeqlby Trail of BitsDevelopmentGitHub stars: 7.3k
CodeQL skill: what it does and how to install it
Scans a codebase for security vulnerabilities with CodeQL's data flow and taint tracking analysis.
Install
$ npx skills add trailofbits/skills --skill codeqlRun it in a terminal. If your agent is already running, start a new session so it picks the skill up.
About this skill
Scans a codebase for security vulnerabilities with CodeQL's data flow and taint tracking analysis.
Similar skills
- Security and HardeningAudits and hardens code that handles user input, authentication, data storage or external integrations against common vulnerabilities.
- Improve Codebase ArchitectureScans a codebase for chances to deepen modules, shows them in an HTML report, then interviews you about the one you pick.
- Constant Time AnalysisDetects timing side-channel vulnerabilities in cryptographic code written in C, C++, Go and other languages.