CodeQL
Guides data-flow and vulnerability analysis with CodeQL. Needs the tool and a database for your code.
How to use it
Install it with the open Skills CLI (needs Node.js), then restart your agent:
npx skills add trailofbits/skills --skill codeql- Download the ZIP from this page and unzip it.
- Put the
codeqlfolder in.claude/skills/inside your project (or~/.claude/skills/for all projects). - Restart Claude Code and call it with
/codeql.
بالعربي
يوجه تحليل تدفق البيانات والثغرات باستخدام CodeQL؛ يحتاج الأداة وقاعدة تحليل مناسبة، وتراجع شروط الاستخدام.
More for security
- /security-review (built into Claude Code): Runs a full security review of the pending changes on your branch.
- Security Review: Reviews auth, input handling, secrets and APIs before release, using a practical security checklist.
- Audit Context Building: Builds a precise picture of code flow, assumptions and dependencies before a security audit, so findings have context.