codeql
Find security flaws across your code with CodeQL.
What it does
Finds security vulnerabilities in a codebase using CodeQL data-flow analysis and project-specific source and sink models.
When to use it
Use when asked to run CodeQL, build a CodeQL database, or scan a repository for vulnerabilities using taint or data-flow analysis.
How to use it
Give it a codebase to scan; it produces a CodeQL database, analysis models, logs, and SARIF results in an output directory.
What you provide
- An existing project
Uses
Good to know
- cannot be undone: $DB_NAME; build, CMakeCache.txt, CMakeFiles
What you need · 4
Requires the CodeQL CLI on PATH and stops if it is missing; the listed installation commands are setup alternatives.
Requires jq on PATH to parse CodeQL database metadata during discovery.
Access · 2
This skill
$DB_NAME
Deletes the database before retrying (irreversible)
build, CMakeCache.txt, CMakeFiles
Deletes cached build files (irreversible)