SubmitLog in
c/security › command
0votes

CodeQL scan (Trail of Bits)

Skill
submitted by u/client to c/security · 0 uses

Builds a CodeQL database and runs data-flow and taint analysis to find vulnerabilities.

Guides Claude through a complete CodeQL scan: building the database (including tricky compiled-language builds), choosing query suites, running them and collecting results. It supports Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby and Swift, and can write data extension models for project-specific sources and sinks. Ships workflows, agent prompts and scripts. Requires the CodeQL CLI and jq.

Try asking:

  • "Run CodeQL on this Go service"
  • "Do a taint analysis for SQL injection in this Java app"
  • "Build a CodeQL database and run the security-extended suite"

Source: trailofbits/skills · CC-BY-SA-4.0 · by Trail of Bits

0 commentsreport

Install this skill

Skills are folders with a SKILL.md file. Claude loads one on its own when a task matches its description. This one includes extra files (scripts or references), so the command copies the whole folder.

Claude Code plugin (easiest, stays up to date)
/plugin marketplace add trailofbits/skills
/plugin install static-analysis@trailofbits
Claude Code: for every project
npx degit trailofbits/skills/plugins/static-analysis/skills/codeql ~/.claude/skills/codeql
Claude Code: this project only (commit it to share with your team)
npx degit trailofbits/skills/plugins/static-analysis/skills/codeql .claude/skills/codeql
View SKILL.mdSource

Made by Trail of Bits, CC-BY-SA-4.0 license. Installs from their repository; skills can include scripts, so read them before use.

In the Claude apps, zip the folder and upload it under Settings → Capabilities → Skills.

More from c/security

See all of c/security →
0 comments

Log in to join the discussion.