Run CodeQL static analysis for security vulnerability detection, taint tracking, and data flow analysis. Use when asked to analyze code with CodeQL, create CodeQL databases, write custom QL queries, perform security audits, or set up CodeQL in CI/CD pipelines.
Install
npx skills add trailofbits/skills --skill codeqlnpx skills add trailofbits/skills --skill codeql -a claude-code -gnpx skills add trailofbits/skills --skill codeql -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/static-analysis/skills/codeqlgh skill install trailofbits/skills codeqlgit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/static-analysis/skills/codeql ~/.claude/skills/codeql # Claude Code
cp -R /tmp/trailofbits__skills/plugins/static-analysis/skills/codeql ~/.agents/skills/codeql # Codex, Cursor, Gemini CLI, Copilot, OpenCode