codeql

Maintained by trailofbits

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java

Current version: Unknown
License: Unknown
Network access: Unknown / not assessed
Review status: Not verified

Problem it solves

This catalog entry helps users find and evaluate codeql for the task described by its available catalog summary. Confirm the exact scope in the linked original source when one is available.

When to use it

Consider codeql when its available catalog summary matches the task at hand. When available, review the linked original source before use for precise instructions, requirements, and limitations.

codeql is listed as an agent skill in RefHub. The listed maintainer is trailofbits. The available catalog summary is: Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java When available, review the linked original source for exact usage instructions, required tools, and limitations.

Installation and updates

These commands are displayed for copying only and are never executed on RefHub servers. Review the linked upstream source before running them.

Install command

npx skills add trailofbits/skills --skill codeql -y

Agent compatibility

No compatibility test has been recorded

Do not assume agent compatibility until documented test evidence is available.