Tag : codeql
Skills, serveurs MCP, CLI et plugins portant le tag « codeql ». Chacun renvoie vers son dépôt GitHub, avec les commandes d’installation pour Claude Code et Codex lorsqu’elles existent.
Métier
Choisissez-en un ou plusieurs : les ressources adaptées à l’un d’eux sont affichées.
Tags : codeql
Choisissez-en un ou plusieurs : seules les ressources qui les portent tous sont affichées.
4 éléments
Trail of Bits Skills
SkillSkills from security firm Trail of Bits: 40+ plugins for code auditing, CodeQL and Semgrep static analysis, differential review, smart-contract and cryptography audits, fuzzing and more. Also installable as a Claude Code or Codex plugin marketplace.
trailofbits/skills7.6kTrail of Bits Skills
PluginPlugin marketplace from security firm Trail of Bits with 40+ plugins for code auditing, CodeQL/Semgrep static analysis, variant analysis, supply-chain risk, smart contract security and reverse engineering. Codex can load it directly too.
trailofbits/skills7.6kStatic Analysis
SkillTrail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.
trailofbits/skills7.6kVariant Analysis
SkillFrom Trail of Bits: starts from one confirmed vulnerability, distills its root cause, then writes and progressively generalizes CodeQL/Semgrep queries to find similar variants across the codebase and report them by severity.
trailofbits/skills7.6k