codeql-skillCodeQL security audit pipeline: static scanning, SARIF triage, and QL query optimization. Trigger on: CodeQL, .ql, .sarif, taint tracking, source→sink, LGTM,...
Install via ClawdBot CLI:
clawdbot install k2-l/codeql-skillGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Potentially destructive shell commands in tool definitions
eval(Calls external URL not in known-safe list
https://codeql.github.com/docs/codeql-language-guides/Audited Apr 18, 2026 · audit v1.0
Generated Mar 21, 2026
A development team uses the skill to scan their open-source repository for vulnerabilities before a major release. They run the SCAN mode to generate SARIF reports, then use AUDIT mode to triage findings and prioritize fixes based on severity and exploitability.
A security consultancy employs the skill during a penetration test for a client's web application. They utilize the SCAN mode to perform static analysis on the codebase, followed by AUDIT mode to extract detailed vulnerability chains and generate exploitation reports for remediation.
A security engineer at a tech company writes custom CodeQL queries to detect company-specific vulnerabilities. They use the TUNE mode to optimize query performance and reduce false positives, ensuring efficient integration into their CI/CD pipeline.
A training organization incorporates the skill into workshops for developers. Participants scan sample codebases with SCAN mode, analyze results with AUDIT mode to understand vulnerability patterns, and learn to tune queries with TUNE mode for hands-on security education.
A company offers automated security scanning and audit services using this skill. They charge clients on a subscription basis for regular code analysis, SARIF report generation, and vulnerability triage, scaling with repository size and frequency.
A cybersecurity firm provides tailored security assessments by leveraging the skill's modes. They bill clients for project-based engagements, including custom query development, in-depth vulnerability analysis, and remediation guidance based on audit outputs.
A software vendor integrates this skill into their development platform or IDE. They generate revenue by licensing the enhanced security features to enterprise customers, offering premium support and updates for the scanning and tuning capabilities.
💬 Integration Tip
Integrate the SCAN mode into CI/CD pipelines for automated security checks, and use the AUDIT mode's output to feed into issue tracking systems for streamlined vulnerability management.
Scored Apr 19, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.