Agent skill · security · personamanagmentlayer
codeql-expert
Expert-level CodeQL for static analysis, vulnerability detection, and security code scanning. Use when the user mentions static analysis, SAST, vulnerability detection, or github security, or when the task involves writing CodeQL queries, building a CodeQL database, taint tracking, or scanning for injection and hardcoded credentials.
Why this skill is useful
Adds executable scripts for CodeQL database creation and custom query development that enhance security analysis capabilities.
What it needs
Requires codeql installed locally. About 3k tokens when loaded. Last updated 2026-03-30. 41 stars on the source repository.
What this skill does
CodeQL Expert Expert guidance for CodeQL static analysis, custom query development, vulnerability detection, and integration with CI/CD pipelines. Core Concepts CodeQL Overview Semantic code analysis engine Treats code as data (queryable database) Supports C/C++, C#, Go, Java, JavaScript/TypeScript, Python, Ruby Powers GitHub Code Scanning Custom query development with QL language CodeQL Workflow 1. Extract code to database 2. Write QL queries 3. Run analysis 4. Review results 5. Fix vulnerabilities 6. Integrate into CI/CD Query Types Security queries (vulnerabilities) Code quality queries (bugs, code smells) Compliance queries (coding standards) Custom queries (org-specific patterns) Installation & Setup Create Database Writing CodeQL Queries Basic Query Structure Find XSS Vulnerabilities Find Hardcoded Credentials Custom Taint Tracking Running CodeQL GitHub Actions Integration Best Practices Start with built-in queries Test on small codebases first Optimize for performance Add clear documentation Tune to reduce false positives Integrate into CI/CD early Resources CodeQL Docs: https://codeql.github.com/docs/ Queries: https://github.com/github/codeql Code Scanning: https://docs.github.com/en/code-security/code-scanning
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills personamanagmentlayer/codeql-expert