codeql
Automated CodeQL static analysis for security and quality across multiple programming languages.
Install
npx skills add https://github.com/trailofbits/skills --skill codeqlStats
| Total installs | 1,429 |
| Weekly installs | 1.4K |
| GitHub stars | 4.0K |
| First seen | Jan 19, 2026 |
| Source | @trailofbits/skills |
Summary
- Supports Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, and Swift with language-specific build methods and extraction strategies
- Three-phase workflow: build database, create data extensions for project-specific APIs, then run analysis with explicit query suite references to avoid silent filtering
- Includes quality assessment, diagnostic queries, and SARIF result processing; always investigates zero findings before reporting clean results
- Requires explicit suite files rather than default pack suites; data extensions catch custom code paths that standard frameworks miss
Tags
Related skills
| Skill | Installs | vs codeql |
|---|---|---|
| code-review-analysis | 1,597 | +168 |
| audit-context-building | 1,400 | -29 |
| sharp-edges | 1,485 | +56 |
| convex-security-check | 1,509 | +80 |
| nodejs-best-practices | 1,287 | -142 |
FAQ
- How many installs does codeql have?
- codeql has 1,429 total installs and 1.4K installs this week.
- Where is codeql hosted?
- codeql is published by @trailofbits/skills at https://github.com/trailofbits/skills.
- How many GitHub stars does codeql have?
- codeql has 4.0K GitHub stars.
- When was codeql first indexed?
- OrangeBot.AI first indexed codeql on Jan 19, 2026.
- How do I install codeql?
- Run: npx skills add https://github.com/trailofbits/skills --skill codeql