SecurityCC-BY-SA-4.0

CodeQL

by Trail of Bits (opens in a new tab) trailofbits/skills

Runs and interprets CodeQL static analysis for security-focused code review.

Installation

Skills CLI

Skills CLI command
npx skills@latest add trailofbits/skills --skill codeql

Requires Node.js and npm. Choose your agents in the installer; add -g for a global installation.

Fieldbook review

Reviewed 27 Sept 2026

Checks extraction quality and query-suite coverage before interpreting zero findings. Requires CodeQL, Bash/Python helpers and a suitable build toolchain for compiled languages.

  • LicenceCC-BY-SA-4.0
  • FrontmatterValid name and description
  • Risky patternsNone found
  • Size296 lines
  • Last checked27 Sept 2026 · 1a6d919ff80f83b262daf650552af6eb6d2c32b19d0c529b70efe0c116b675cf

What it can touch

  • Runs commands

    Runs shell commands such as tests, builds or installs.

  • Writes docs

    Creates or updates documents such as specs, plans or ADRs.

  • Network

    Reaches external services or the web.

Read the source

Fieldbook links to the original instead of copying it, so you always read the version you install.

plugins/static-analysis/skills/codeql/SKILL.md on GitHub (opens in a new tab)