All Skills
Design & CreativeClaude Plugins (Official)

sonatype guide — Agent Skill

by sonatype

Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.

At a glance

sonatype-guide is an Agent Skill by sonatype in the Design & Creative category. In Claude Code it installs with `/plugin install sonatype-guide@claude-plugins-official` after adding the anthropics/claude-plugins-official marketplace; other assistants use its SKILL.md instructions as rules.

How to install sonatype guide in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install sonatype guide in Claude CodeAnthropic's agentic CLI

  1. Add the marketplace

    claude
    /plugin marketplace add anthropics/claude-plugins-official
  2. Install the skill

    claude
    /plugin install sonatype-guide@claude-plugins-official
  3. Use it

    These are slash commands for a Claude Code session, not your shell. Claude auto-invokes the skill when your request matches its description — or type its slash command if it exposes one.

Documentation

Full README

Sonatype Guide Plugin for Claude Code

Integrates Sonatype Guide MCP server to provide Claude Code with software supply chain intelligence and dependency security analysis.

Features

With this plugin, Claude Code can:

  • Proactively check dependencies - Automatically evaluates packages before installing or upgrading, not just when you ask
  • Analyze vulnerabilities - Surface CVEs with severity scores, distinguishing direct vs transitive risks
  • Recommend secure versions - Ranked upgrade paths with Developer Trust Scores and breaking change analysis
  • Audit your project - Scan dependency manifests for security, license, and policy compliance issues
  • Compare alternatives - Side-by-side security comparison when choosing between libraries

Prerequisites

You need a Sonatype Guide account and API token.

Get Your Token

  1. Visit guide.sonatype.com/settings/tokens
  2. Generate a new token
  3. Copy the token value

Setup

1. Set Your Environment Variable

Add your Sonatype Guide token as an environment variable. Choose one method:

Option A: Shell profile (recommended)

Add to ~/.zshrc, ~/.bashrc, or ~/.profile:

More Design & Creative skills

Catalog data refreshed . Something wrong? Report it.