Codeql Expert

This turns Claude into a CodeQL specialist for security scanning and static analysis. You get help writing custom QL queries for vulnerability detection, setting up databases for different languages, and integrating with GitHub Actions or your CI/CD pipeline. The skill covers practical stuff like taint tracking configurations, finding SQL injection and XSS vulnerabilities, and optimizing queries to reduce false positives. Most useful when you're moving beyond basic security scans and need to write organization-specific detection rules or tune CodeQL for your codebase. It assumes you understand the basics of static analysis but need expert guidance on CodeQL's query language and workflow.

skills.sh installs: 172
GitHub stars: 44
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add personamanagmentlayer/pcl --skill codeql-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

CodeQL Expert

Expert guidance for CodeQL static analysis, custom query development, vulnerability detection, and integration with CI/CD pipelines.

Core Concepts

CodeQL Overview

Semantic code analysis engine
Treats code as data (queryable database)
Supports C/C++, C#, Go, Java, JavaScript/TypeScript, Python, Ruby
Powers GitHub Code Scanning
Custom query development with QL language

CodeQL Workflow

Extract code to database
Write QL queries
Run analysis
Review results
Fix vulnerabilities
Integrate into CI/CD

Query Types

Security queries (vulnerabilities)
Code quality queries (bugs, code smells)
Compliance queries (coding standards)
Custom queries (org-specific patterns)

Installation & Setup

# Download CodeQL CLI
wget https://github.com/github/codeql-cli-binaries/releases/latest/download/codeql-linux64.zip
unzip codeql-linux64.zip
export PATH="$PATH:/path/to/codeql"

# Clone CodeQL queries
git clone https://github.com/github/codeql.git codeql-repo

# Verify
codeql --version

Create Database

# JavaScript/TypeScript
codeql database create my-js-db --language=javascript

SKILL.md on GitHub

Details

Repository: github.com/personamanagmentlayer/pcl
Category: Security
First seen: Jun 3, 2026