sonar-analyze
Analyze a file for quality and security issues using SonarQube
Install
With your agent
Install OMGSkills skill "sonarsource/sonarqube-agent-plugins:skills/sonar-analyze" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/SonarSource/sonarqube-agent-plugins /tmp/sonarqube-agent-plugins && ln -s /tmp/sonarqube-agent-plugins/skills/sonar-analyze ~/.claude/skills/sonar-analyzeFrom README
SonarQube — Code Analysis Analyze code for quality and security issues using the SonarQube MCP Server. Prerequisites This skill requires the SonarQube MCP Server to be configured and at least one of the tools mcpsonarquberunadvancedcodeanalysis or mcpsonarqubeanalyzefilelist to be available in your session. Before proceeding, verify at least one of these tools is accessible. If none are, try the CLI fallback in Step 3 before giving up — don't invent other CLI commands (e.g. sonar mcp call does not exist). If the CLI fallback also fails or doesn't apply, narrow down the cause — check whether the sonarqube MCP server is enabled in this agent's configuration. Not enabled / not registered → recommend running the sonar-integrate skill. Enabled but its tools are still unavailable → configuration is correct but the server failed to start.
More from this repo
sonar-coverage
Used to find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when...
sonar-dependency-risks
Used to search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional...
sonar-duplication
Used to find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key...