メニュー
Use this skill when the user mentions "sonar", "sonarqube", "code quality", "code smell", "quality gate", "new code issues", "fetch issues", "security hotspots", or wants to analyze code quality.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/COvayurt/awesome-agent-toolkit --skill sonarコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Use this skill when the user mentions "review code", "review my code", "review changes", "review branch", "review MR", "code review", "review my MR", "android review", or wants an architectural code review of the current branch.
Use this skill when the user mentions "gitlab issues", "list issues", "show issues", "my issues", "milestone", "sprint", "create issue", "update issue", "assign issue", or wants to manage GitLab issues.
Use this skill when the user mentions "merge request", "MR", "pull request", "code review", "review comments", "list MRs", "show MRs", "my MRs", "resolve discussion", or wants to manage GitLab merge requests.
SKILL.md を表示中
SOC 職業分類に基づく
| name | sonar |
| description | Use this skill when the user mentions "sonar", "sonarqube", "code quality", "code smell", "quality gate", "new code issues", "fetch issues", "security hotspots", or wants to analyze code quality. |
Fetch and manage SonarQube issues, quality gates, and metrics using bash scripts.
Call bash scripts directly. No MCP server required.
Scripts location: ~/.agents/skills/sonar/scripts/
IMPORTANT: Environment variables must be set. Check with:
echo $SONAR_HOST_URL $SONAR_TOKEN $SONAR_PROJECT_KEY
If empty, add them to your shell profile (~/.bashrc or ~/.zshrc):
export SONAR_HOST_URL="https://sonarqube.example.com"
export SONAR_TOKEN="sqa_xxxxxxxxxxxx"
export SONAR_PROJECT_KEY="my-project-key"
Set SKILL_DIR=~/.agents/skills/sonar
# Fetch all open issues (HIGH, MEDIUM severity)
bash $SKILL_DIR/scripts/fetch-issues.sh --severity HIGH,MEDIUM
# Fetch only HIGH severity issues
bash $SKILL_DIR/scripts/fetch-issues.sh --severity HIGH
# Fetch issues from NEW CODE only (important for CI/CD)
bash /scripts/fetch-issues.sh --severity HIGH --new-code
bash /scripts/fetch-issues.sh --file src/main/java/MyClass.java
bash $SKILL_DIR/scripts/quality-gate.sh
Returns: PASSED, FAILED, or ERROR with condition details.
bash $SKILL_DIR/scripts/metrics.sh
Returns: Coverage %, duplications, bugs, vulnerabilities, code smells count.
bash $SKILL_DIR/scripts/hotspots.sh
Returns: Security hotspots that need review.
bash $SKILL_DIR/scripts/rule-details.sh java:S2140
Explains what a specific rule means and how to fix it.
bash $SKILL_DIR/scripts/run-analysis.sh
Triggers a SonarQube scan on the current project.
When user asks about "new code issues" or "sonar issues from new code":
bash $SKILL_DIR/scripts/fetch-issues.sh --severity HIGH --new-codeWhen user asks about quality gate status:
bash $SKILL_DIR/scripts/quality-gate.shWhen user mentions security:
bash $SKILL_DIR/scripts/hotspots.shPresent issues as a table:
| # | File | Line | Rule | Message | Severity |
|---|---|---|---|---|---|
| 1 | File.java | 42 | java:S2140 | Use nextInt() | HIGH |
After listing, ask:
Ready to fix? Reply with task numbers (e.g., 1, 3, 5), all, or skip.