CodeQL Security Scanner

Trigger / When to Use

Use this skill when the user wants deep semantic code scanning, GitHub Advanced Security style analysis, custom CodeQL queries, SARIF output, or vulnerability investigation with CodeQL databases.

Good trigger phrases:

• "run CodeQL locally"
• "add CodeQL code scanning"
• "scan JavaScript for security issues"
• "write a CodeQL query"
• "upload SARIF to GitHub"
• "investigate a CodeQL alert"

Core Capabilities