Agent skill

Cpg Analysis

Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing

MITAuto-check passedSecurity

Install Cpg Analysis

skills CLI

$ npx skills add alinaqi/maggy --skill cpg-analysis -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install alinaqi/maggy cpg-analysis --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/alinaqi/maggy.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/cpg-analysis .claude/skills/cpg-analysis && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "cpg-analysis" agent skill from https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis into .claude/skills/cpg-analysis/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cpg-analysis", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add alinaqi/maggy --skill cpg-analysis -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install alinaqi/maggy cpg-analysis --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/alinaqi/maggy.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/cpg-analysis .agents/skills/cpg-analysis && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "cpg-analysis" agent skill from https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis into .agents/skills/cpg-analysis/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cpg-analysis", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add alinaqi/maggy --skill cpg-analysis -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install alinaqi/maggy cpg-analysis --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/alinaqi/maggy.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/cpg-analysis .cursor/skills/cpg-analysis && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "cpg-analysis" agent skill from https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis into .cursor/skills/cpg-analysis/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cpg-analysis", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/alinaqi/maggy.git --path skills/cpg-analysis

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add alinaqi/maggy --skill cpg-analysis -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install alinaqi/maggy cpg-analysis --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/alinaqi/maggy.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/cpg-analysis .gemini/skills/cpg-analysis && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "cpg-analysis" agent skill from https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis into .gemini/skills/cpg-analysis/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cpg-analysis", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install alinaqi/maggy cpg-analysis

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add alinaqi/maggy --skill cpg-analysis -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/alinaqi/maggy.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/cpg-analysis .github/skills/cpg-analysis && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "cpg-analysis" agent skill from https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis into .github/skills/cpg-analysis/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cpg-analysis", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add alinaqi/maggy --skill cpg-analysis -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install alinaqi/maggy cpg-analysis --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/alinaqi/maggy.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/cpg-analysis .opencode/skills/cpg-analysis && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "cpg-analysis" agent skill from https://github.com/alinaqi/maggy/tree/main/skills/cpg-analysis into .opencode/skills/cpg-analysis/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "cpg-analysis", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: cpg-analysis
GitHub stars: 707
Token cost: ~2k tokens
SKILL.md length: 546 words
Files: 1
Skills in repo: 71
Repo updated: Sep 24, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing

Tasks that involve Static analysis and SAST
SKILL.md covers Tier Selection Guide, Tier 2: Joern CPG (CodeBadger…, Tier 3: CodeQL and Combined Workflow: Deep Analysis, plus 1 more section
Calls brew

What it does

Cpg Analysis is an agent skill from alinaqi/maggy. Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing

Its SKILL.md is about 2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Security, covering Static analysis and SAST. It works with Model Context Protocol. The repository describes itself as: What started as an opinionated Claude Code setup kit is now an autonomous AI engineering command center. The licence is MIT.

When your agent uses it

Tasks that involve Static analysis and SAST

Example prompts

“/cpg-analysis”

Requirements

Python 3
Docker

What it can do on your machine

Read from SKILL.md and the folder at commit 72a456e. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
- brew
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Cpg Analysis loads about 2k tokens when it runs. Until then it costs about 38 tokens; SKILL.md has 546 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~38
When it runs · the whole SKILL.md, loaded when a task matches: ~2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from alinaqi/maggy at commit 72a456e, republished under its MIT licence (© alinaqi). 546 words, ~2,029 tokens.

Download SKILL.mdSave it as .claude/skills/cpg-analysis/SKILL.md (or your agent's skills folder).

name: cpg-analysis
description: Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing
when-to-use: When deep code analysis is needed — control flow, data flow, taint tracking, or security auditing
user-invocable: true
effort: high

CPG Analysis Skill

Purpose: Deep code analysis beyond AST. Use Joern for full Code Property Graph (control flow, data flow, program dependencies) and CodeQL for interprocedural taint analysis and vulnerability detection.

These are opt-in tools. They require Docker/JVM (Joern) or CodeQL CLI. Use codebase-memory-mcp (Tier 1, always-on) for everyday navigation. Use these for deep analysis when Tier 1 is not enough.

┌────────────────────────────────────────────────────────────────┐
│  CODE PROPERTY GRAPH = AST + CFG + CDG + DDG + PDG             │
│  ─────────────────────────────────────────────────────────────│
│  AST  = Abstract Syntax Tree (structure)                       │
│  CFG  = Control Flow Graph (execution paths)                   │
│  CDG  = Control Dependency Graph (conditional dependencies)    │
│  DDG  = Data Dependency Graph (data flow between statements)   │
│  PDG  = Program Dependency Graph (CDG + DDG combined)          │
│                                                                │
│  Tier 2 (Joern): Full CPG with 40+ query tools                │
│  Tier 3 (CodeQL): Interprocedural taint + security queries     │
└────────────────────────────────────────────────────────────────┘

Tier Selection Guide

Simple symbol lookup, dependency trace, blast radius?
  → Tier 1: codebase-memory-mcp (always on, sub-ms)

Control flow paths, data flow, dead code, complex refactoring?
  → Tier 2: Joern CPG (on-demand, seconds)

Security audit, taint analysis, vulnerability detection?
  → Tier 3: CodeQL (on-demand, seconds to minutes)

Full security review before release?
  → All three tiers in sequence

Tier 2: Joern CPG (CodeBadger MCP)

When to Use Joern

Scenario	Why Joern	Tier 1 Can't Do This
Trace data flow through functions	Full DDG traversal	Tier 1 has no data flow
Understanding control flow paths	CFG analysis with branch conditions	Tier 1 has no CFG
Finding dead/unreachable code	PDG reachability analysis	Tier 1 only detects unused exports
Complex refactoring impact	Cross-function dependency chains	Tier 1 limited to call graph
Auditing third-party library usage	Deep call chain traversal	Tier 1 stops at import boundary
Understanding exception flow	CFG includes throw/catch paths	Tier 1 ignores exceptions

Key MCP Tools (Joern/CodeBadger)

Tool	Purpose	Example Query
`generate_cpg`	Build CPG for project	First-time setup or after major changes
`get_cpg_status`	Check CPG build status	Verify CPG is ready before querying
`run_cpgql_query`	Run arbitrary CPGQL queries	`cpg.method("login").callOut.code.l`
`get_cpgql_syntax_help`	Query language reference	When unsure about query syntax
`get_cfg`	Control flow graph for a method	Understand execution paths in a function
`list_methods`	List all methods in project	Overview of available functions
`get_method_source`	Get source code of a method	Read specific function source
`list_calls`	List calls from/to a method	Caller/callee analysis
`get_call_graph`	Full call graph visualization	Understand call chains
`get_type_definition`	Type/class definitions	Understand type hierarchy

Supported Languages (Joern)

Java, Scala, C/C++, Python, JavaScript, TypeScript, PHP, Ruby, Go, Kotlin, Swift, Lua

Not supported: Rust (use CodeQL for Rust)

MCP Configuration (Joern)

json

{
  "mcpServers": {
    "codebadger": {
      "url": "http://localhost:4242/mcp",
      "type": "http"
    }
  }
}

Prerequisites

Docker (for Joern backend)
Python 3.10+ (for MCP server)
Install: ~/.claude/install-graph-tools.sh --joern

Common CPGQL Queries

scala

// Find all methods that handle user input
cpg.method.where(_.parameter.name(".*input.*|.*request.*")).name.l

// Trace data flow from parameter to return
cpg.method("processPayment").parameter.reachableBy(cpg.method("processPayment").methodReturn).l

// Find methods with high cyclomatic complexity
cpg.method.where(_.controlStructure.size > 10).name.l

// Dead code: methods with no callers
cpg.method.where(_.callIn.size == 0).filter(_.name != "main").name.l

// Exception flow: methods that can throw but callers don't catch
cpg.method.where(_.ast.isThrow.size > 0).callIn.method.filter(_.ast.isTry.size == 0).name.l

Tier 3: CodeQL

Show full SKILL.md (242 more words)Show less

When to Use CodeQL

Scenario	Why CodeQL	Other Tiers Can't Do This
Security audit before release	Interprocedural taint analysis	Joern has basic taint, CodeQL is deeper
Reviewing auth/payment code	Data flow from source to sink	Cross-function, cross-file taint
PR security review	Targeted vulnerability scan	Pre-built OWASP query packs
Compliance checking	CWE/OWASP pattern matching	Curated security query suites
Rust security analysis	Full Rust support	Joern doesn't support Rust

Key MCP Tools (CodeQL)

Tool	Purpose
`run_query`	Execute a CodeQL query against the database
`find_definitions`	Locate symbol definitions
`find_references`	Find all references to a symbol
`get_results`	Parse BQRS (Binary Query Result Sets)

Supported Languages (CodeQL)

C/C++, C#, Go, Java, Kotlin, JavaScript, TypeScript, Python, Ruby, Swift, Rust

MCP Configuration (CodeQL)

json

{
  "mcpServers": {
    "codeql": {
      "command": "codeql-mcp",
      "args": ["--database", ".code-graph/codeql-db"]
    }
  }
}

Prerequisites

CodeQL CLI (brew install codeql on macOS)
Install: ~/.claude/install-graph-tools.sh --codeql

Common CodeQL Patterns

// SQL injection: user input flows to SQL query
import python
from DataFlow::PathNode source, DataFlow::PathNode sink
where TaintTracking::hasFlowPath(source, sink)
  and source instanceof RemoteFlowSource
  and sink instanceof SqlExecution
select sink, source, sink, "SQL injection from $@.", source, "user input"

// Unvalidated redirect
from DataFlow::PathNode source, DataFlow::PathNode sink
where source instanceof RemoteFlowSource
  and sink instanceof RedirectSink
select sink, "Unvalidated redirect from user input"

Combined Workflow: Deep Analysis

When performing security review or complex refactoring, use all tiers:

1. SCOPE       → Tier 1: detect_changes / get_architecture
                 Identify files and modules in scope

2. STRUCTURE   → Tier 1: search_graph / trace_call_path
                 Map the call graph and dependencies

3. FLOW        → Tier 2: get_cfg / run_cpgql_query
                 Analyze control flow and data flow paths

4. SECURITY    → Tier 3: run_query with taint analysis
                 Check for vulnerabilities in data paths

5. REPORT      → Combine findings from all tiers
                 Prioritize: Critical > High > Medium > Low

Anti-Patterns

Anti-Pattern	Do This Instead
Using Joern/CodeQL for simple symbol lookup	Use Tier 1 `search_graph` (sub-ms vs seconds)
Running full CPG build on every commit	Build CPG on-demand; use Tier 1 for continuous monitoring
Querying Joern without checking `get_cpg_status`	Always verify CPG is built and current before querying
Running CodeQL without a specific security question	Have a hypothesis first; CodeQL queries are expensive
Ignoring Tier 1 blast radius before deep analysis	Always scope with Tier 1 first, then go deep on flagged areas
Using CodeQL for non-security structural queries	Use Joern CPGQL for structural/flow queries; CodeQL for security

Files

Just SKILL.md in skills/cpg-analysis of alinaqi/maggy.

Open the folder on GitHubat commit 72a456e

Compare with similar skills

Cpg Analysis next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Cpg Analysis compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Cpg Analysis this skillalinaqi/maggy	707	—	~2k	Automated safety check: Pass	MIT	15 days ago
Ida Reversesickn33/agentic-awesome-skills	47k	1 repos	~3.1k	Automated safety check: Pass	MIT	today
Codeql Auditdeonmenezes/mantishack	504	—	~325	Automated safety check: Pass	Apache-2.0	6 days ago
Agent Bom RegistryLeoYeAI/openclaw-master-skills	2.2k	—	~969	Automated safety check: Pass	Apache-2.0	2 mo ago
Secknowledge SkillPa55w0rd/secknowledge-skill	424	—	~2.7k	Automated safety check: Pass	None	3 mo ago
Evm Audit Flowmtarcure/claude-vibe-squad	164	—	~1.5k	Automated safety check: Pass	MIT	18 days ago

Similar skills

Ida Reverse
sickn33/agentic-awesome-skills
Reverse engineer binaries with IDA Pro: decompilation, disassembly, data-flow tracking, cross-references, and IDA MCP automation for deep static analysis of PE/ELF/Mach-O targets.
47k GitHub starsUsed in 1 repo~3.1k tokens
SecurityAuto-check passed
Codeql Audit
deonmenezes/mantishack
Build a CodeQL database and run dataflow-backed query-suite analysis via the mantiscodeql MCP server
504 GitHub stars~325 tokensUpdated 6 days ago
SecurityAuto-check passed
Agent Bom Registry
LeoYeAI/openclaw-master-skills
MCP server security registry and trust assessment — look up servers in the 427+ server security metadata registry, run pre-install marketplace checks, batch fleet risk scoring, assess skill file…
2.2k GitHub stars~969 tokensUpdated 2 mo ago
SecurityAuto-check passed
Secknowledge Skill
Pa55w0rd/secknowledge-skill
Web+AI 安全测试知识库。融合 WooYun 88,636 案例 + 先知 L1-L4 方法论 + GAARM 173 风险 + OWASP Top 10 (LLM/ASI/WSTG)。
424 GitHub stars~2.7k tokensUpdated 3 mo ago
SecurityAuto-check passed
Evm Audit Flow
mtarcure/claude-vibe-squad
A skill your agent uses when you have a Foundry or Hardhat repository of Solidity or Vyper contracts and want the end-to-end EVM review workflow on native CLIs — a slither static pass, semgrep taint…
164 GitHub stars~1.5k tokensUpdated 18 days ago
SecurityAuto-check passed
Semgrep Triage
deonmenezes/mantishack
Run semgrep via the mantissemgrep MCP server and triage results into the candidate/confirmed/rejected lifecycle
504 GitHub stars~312 tokensUpdated 6 days ago
SecurityAuto-check passed

Questions about Cpg Analysis

What does Cpg Analysis do?

Deep code property graph analysis with Joern CPG (AST+CFG+PDG) and CodeQL for control flow, data flow, taint analysis, and security auditing. Cpg Analysis is an agent skill from alinaqi/maggy.

When should I use Cpg Analysis?

Cpg Analysis fits situations like: tasks that involve Static analysis and SAST.

How do I install Cpg Analysis in Claude Code?

Run `npx skills add alinaqi/maggy --skill cpg-analysis -a claude-code`. Or copy the skill folder (skills/cpg-analysis in alinaqi/maggy) into .claude/skills/cpg-analysis in your project. Claude Code loads it when a task matches its description.

How do I install Cpg Analysis in Codex?

Run `npx skills add alinaqi/maggy --skill cpg-analysis -a codex`. Or copy the skill folder (skills/cpg-analysis in alinaqi/maggy) into .agents/skills/cpg-analysis in your project. Codex loads it when a task matches its description.

Can I use Cpg Analysis in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add alinaqi/maggy --skill cpg-analysis -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/cpg-analysis, .gemini/skills/cpg-analysis, .github/skills/cpg-analysis and .opencode/skills/cpg-analysis in your project.

What does Cpg Analysis need to run?

Going by SKILL.md and its folder, Cpg Analysis needs the command-line tools its instructions call (brew). Our summary lists: Python 3; Docker.

Does Cpg Analysis access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Cpg Analysis safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Cpg Analysis use?

Cpg Analysis is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Cpg Analysis use?

About 2k tokens (SKILL.md is roughly 8.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Cpg Analysis?

Skills that share tags, products or a category with Cpg Analysis: Ida Reverse (sickn33/agentic-awesome-skills, 47k stars), Codeql Audit (deonmenezes/mantishack, 504 stars), Agent Bom Registry (LeoYeAI/openclaw-master-skills, 2.2k stars) and Secknowledge Skill (Pa55w0rd/secknowledge-skill, 424 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Cpg Analysis?

alinaqi (a GitHub user) maintains it in alinaqi/maggy, which has 707 GitHub stars. The repository holds 71 skills in this directory. The repository was last updated on September 24, 2026.

Source: alinaqi/maggy on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Cpg Analysis

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

CPG Analysis Skill

Tier Selection Guide

Tier 2: Joern CPG (CodeBadger MCP)

When to Use Joern

Key MCP Tools (Joern/CodeBadger)

Supported Languages (Joern)

MCP Configuration (Joern)

Prerequisites

Common CPGQL Queries

Tier 3: CodeQL

When to Use CodeQL

Key MCP Tools (CodeQL)

Supported Languages (CodeQL)

MCP Configuration (CodeQL)

Prerequisites

Common CodeQL Patterns

Combined Workflow: Deep Analysis

Anti-Patterns

Files

Compare with similar skills

Similar skills

More from alinaqi/maggy

Related

Questions about Cpg Analysis