All Skills
Data & AnalysisClaude Plugins (Official)

sonarqube — Agent Skill

by SonarSource · Updated

Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands giv…

At a glance

sonarqube is an Agent Skill by SonarSource in the Data & Analysis category. In Claude Code it installs with `/plugin install sonarqube@claude-plugins-official` after adding the anthropics/claude-plugins-official marketplace; other assistants use its SKILL.md instructions as rules. Its source repository has 114 GitHub stars (as of Oct 28, 2026).

Source 114GitHub stars

How to install sonarqube in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install sonarqube in Claude CodeAnthropic's agentic CLI

  1. Add the marketplace

    claude
    /plugin marketplace add anthropics/claude-plugins-official

  2. Install the skill

    claude
    /plugin install sonarqube@claude-plugins-official

  3. Use it

    These are slash commands for a Claude Code session, not your shell. Claude auto-invokes the skill when your request matches its description — or type its slash command if it exposes one.

Documentation

Full README

SonarQube agent integrations

Made by [Sonar](https://www.sonarsource.com/)

SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.

SonarQube combines deterministic checks with AI-assisted workflows so quality rules apply consistently to code from both developers and agents. Where your stack supports it, analysis and secrets scanning can run inside the agent loop instead of only in CI.

What do the plugins include

The Plugin helps agents connect to SonarQube CLI and SonarQube MCP Server for issue detection, checking project metrics such as test coverage and duplications, fetch dependency risks, etc. Claude Code, Copilot CLI, Codex, Antigravity, Devin, Pi, and OpenCode (through SonarQube CLI) install agent hooks for secrets scanning and, when entitled, Vortex analysis.

How to use: Run /sonarqube:sonar-integrate after installation to walk through setup — CLI installation, authentication, and wiring up the MCP Server and hooks. From there, use slash commands like /sonarqube:sonar-quality-gate to check quality gates or interact naturally with prompts like "analyze my code for issues," "show open SonarQube findings," or "check my coverage." With Vortex analysis enabled, verification happens automatically after each edit with no manual invocation required.

Prerequisites

  • A SonarQube account (SonarQube Cloud, Server, or Community Build). Some features (for example Vortex analysis) depend on your SonarQube Cloud organization settings.
  • [SonarQube CLI](https://cli.sonarqube.com/) (sonar) on your machine.
  • A container runtime (Docker, Podman, or Nerdctl) for the MCP server image.

Authenticate once with `sonar auth login` (browser flow; credentials stay in your OS keychain). The MCP server uses that login.

Check auth anytime:

bash
sonar auth status

How plugins connect to SonarQube

Excerpt — the full document is on GitHub.

More Data & Analysis skills

Catalog data refreshed . Something wrong? Report it.