New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Sonarclaude

by agentculture in agentculture/culture

Query SonarCloud API for code quality data. An agent skill from agentculture/culture.

Apache-2.0Auto-check passedDevelopment

Install Sonarclaude

skills CLI
$ npx skills add agentculture/culture --skill sonarclaude -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install agentculture/culture sonarclaude --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/agentculture/culture.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/sonarclaude .claude/skills/sonarclaude && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
sonarclaude
GitHub stars
115
Token cost
~764 tokens
SKILL.md length
215 words
Files
2 (incl. scripts)
Skills in repo
19
Repo updated
First seen
Licence
Apache-2.0

At a glance

Query SonarCloud API for code quality data. An agent skill from agentculture/culture.

  • : checking quality gate status
  • SKILL.md covers Prerequisites, Environment, Usage and Options, plus 1 more section
  • Runs Shell scripts from its folder; calls bash; needs SONAR_TOKEN
  • Fetching code issues

What it does

Sonarclaude is an agent skill from agentculture/culture. Query SonarCloud API for code quality data. Use when: checking quality gate status, fetching code issues or security hotspots, reviewing metrics (coverage, bugs, code smells), or the user says "sonar", "quality gate", "code quality", "sonarclaude".

Its SKILL.md is about 760 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including scripts (for example `scripts/sonar.sh`).

It sits in Development, covering Quality gates, Refactoring and Code quality. The repository describes itself as: Culture turns isolated stochastic agents into cooperative, inspectable, improvable artificial colleagues. The licence is Apache-2.0.

When your agent uses it

  • : checking quality gate status
  • Fetching code issues
  • Security hotspots
  • Reviewing metrics (coverage

Example prompts

  • “quality gate”
  • “code quality”
  • “sonarclaude”
  • “/sonarclaude”

Requirements

  • A Bash shell
  • A credential in SONAR_TOKEN

What it can do on your machine

Read from SKILL.md and the folder at commit 44865d8. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Shell), which the agent can run.

    Shell commands in SKILL.md call:

    • bash

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • SONAR_TOKEN

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Sonarclaude loads about 764 tokens when it runs. Until then it costs about 65 tokens; SKILL.md has 215 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~65
When it runs · the whole SKILL.md, loaded when a task matches
~764

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from agentculture/culture at commit 44865d8, republished under its Apache-2.0 licence (© agentculture). 215 words, ~764 tokens.

Download SKILL.mdSave it as .claude/skills/sonarclaude/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
sonarclaude
description
Query SonarCloud API for code quality data. Use when: checking quality gate status, fetching code issues or security hotspots, reviewing metrics (coverage, bugs, code smells), or the user says "sonar", "quality gate", "code quality", "sonarclaude".

SonarClaude

Query SonarCloud projects for quality gate status, issues, metrics, and security hotspots.

Prerequisites

The script requires the following tools on PATH:

  • bash
  • curl — talks to the SonarCloud REST API
  • jq — parses responses and URL-encodes accept comments

Environment

Requires SONAR_TOKEN environment variable. Set the project key per-repo via the SONAR_PROJECT environment variable (or pass --project KEY on each invocation).

Usage

bash
# Quality gate status (pass/fail)
bash .claude/skills/sonarclaude/scripts/sonar.sh status

# List issues (bugs, vulnerabilities, code smells)
bash .claude/skills/sonarclaude/scripts/sonar.sh issues

# Filter issues by severity and type
bash .claude/skills/sonarclaude/scripts/sonar.sh issues --severity CRITICAL --type BUG

# Key metrics (coverage, bugs, code smells, duplication, LOC)
bash .claude/skills/sonarclaude/scripts/sonar.sh metrics

# Security hotspots
bash .claude/skills/sonarclaude/scripts/sonar.sh hotspots

# Accept (won't-fix) an OPEN issue with a rationale comment
bash .claude/skills/sonarclaude/scripts/sonar.sh accept \
  --issue AZ3Ep83i4ywi8V_l99p0 \
  --comment "Pushback: rule premise doesn't fit our test fixture pattern."

# Different project
bash .claude/skills/sonarclaude/scripts/sonar.sh status --project OtherOrg_OtherProject

# Raw JSON output
bash .claude/skills/sonarclaude/scripts/sonar.sh issues --raw

# Limit results
bash .claude/skills/sonarclaude/scripts/sonar.sh issues --limit 10

Options

FlagDefaultDescription
--project$SONAR_PROJECTSonarCloud project key
--severityallFilter: BLOCKER, CRITICAL, MAJOR, MINOR, INFO
--typeallFilter: BUG, VULNERABILITY, CODE_SMELL
--limit25Max results returned
--rawoffOutput raw JSON instead of formatted summary
--issue—Issue key (required for accept)
--comment—Rationale comment (required for accept)

When to use accept

Sonar rules occasionally flag patterns where the rule's premise does not fit the code (e.g. test fixtures with intentional bad-password literals, contradictory rule pairs like S7494 vs S7500). After deciding pushback in PR review, run sonar.sh accept with a rationale comment instead of leaving the issue OPEN — this moves it to ACCEPTED/WONTFIX in SonarCloud history (visible to future maintainers) while clearing the quality-gate signal. Always include a --comment explaining why; silent dismissals are not acceptable curation.

Do not call SonarCloud's HTTP API directly from other skills or one-off scripts — sonar.sh accept is the supported entry point so the rationale flow stays consistent.

© agentculture, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (scripts) in .claude/skills/sonarclaude of agentculture/culture.

  • SKILL.md
  • scripts/sonar.sh

Open the folder on GitHubat commit 44865d8

Compare with similar skills

Sonarclaude next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Sonarclaude compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Sonarclaude this skillagentculture/culture115—~764Automated safety check: PassApache-2.0
Qe Quality Assessmentproffesor-for-testing/agentic-qe495—~1.9kAutomated safety check: PassMIT
Code Quality Gate Checkertelagod/code-abyss244—~609Automated safety check: NotesMIT
Constraint-Driven Developmentaddyosmani/agent-skills105k2 repos~5.2kAutomated safety check: PassMIT
AI Development Guideshinpr/claude-code-workflows694—~3.9kAutomated safety check: PassMIT
Sonarcloud Reviewlucasvieirasilva/nx-plugins153—~2.7kAutomated safety check: NotesMIT

Similar skills

  • Qe Quality Assessment

    proffesor-for-testing/agentic-qe

    Evaluates code quality through complexity analysis, lint results, code smell detection, and test health metrics.

    495 GitHub stars~1.9k tokensUpdated yesterday
    DevelopmentAuto-check passed

  • Code Quality Gate Checker

    telagod/code-abyss

    Checks cyclomatic complexity, function and file length, parameter count, nesting depth and naming conventions against fixed thresholds, with a bundled Node.js script and hotspot integration.

    244 GitHub stars~609 tokensUpdated 2 mo ago
    DevelopmentAuto-check: notes

  • Constraint-Driven Development

    addyosmani/agent-skills

    Records a project's quality bar in CONSTRAINTS.md and watches diffs for signs an agent quietly weakened it, such as suppressions, skipped tests or lowered thresholds.

    105k GitHub starsUsed in 2 repos~5.2k tokens
    DevelopmentAuto-check passed

  • AI Development Guide

    shinpr/claude-code-workflows

    Applies language-agnostic and backend technical decision criteria, anti-pattern detection, debugging, and quality gates.

    694 GitHub stars~3.9k tokensUpdated 9 days ago
    DevelopmentAuto-check passed

  • Sonarcloud Review

    lucasvieirasilva/nx-plugins

    Fetches and triages SonarCloud findings (issues, security hotspots, quality gate) for the current pull request or branch of this repository via the SonarCloud Web API, summarizes them in a markdown…

    153 GitHub stars~2.7k tokensUpdated 12 days ago
    DevelopmentAuto-check: notes

  • HTML Diff Refactor Check

    tabler/tabler

    Proves that a refactor leaves every rendered preview page unchanged by comparing fresh HTML output against a baseline captured beforehand.

    42k GitHub stars~1.1k tokensUpdated today
    DevelopmentAuto-check passed

More from agentculture/culture

All 19 skills in this repo

  • Agent Config

    agentculture/culture

    Show a Culture agent's full configuration in one read-only view: its system-prompt file (CLAUDE.md / AGENTS.md / GEMINI.md), the parallel culture.yaml, and the agent's local .claude/skills index.

    115 GitHub stars~1k tokensUpdated today
    Auto-check passed

  • Cicd

    agentculture/culture

    CI/CD lane for culture: branch, commit, push, create PR, wait for automated reviewers, fetch comments, fix or pushback, reply, resolve threads.

    115 GitHub stars~3.7k tokensUpdated today
    Auto-check passed

  • Communicate

    agentculture/culture

    All agent communication from culture: in-mesh chat (channels, DMs, mentions, knowledge sharing) via culture channel CLI, AND cross-repo hand-off briefs to sibling-repo agents (agentirc, steward…

    115 GitHub stars~2.8k tokensUpdated today
    Auto-check passed

  • Communicate

    agentculture/culture

    Cross-repo + mesh communication: file tracked GitHub issues on sibling repos, comment on existing issues, fetch issues with body + comments to inline current state into briefs, and send live…

    115 GitHub stars~2.7k tokensUpdated today
    Auto-check passed

  • Pypi Maintainer

    agentculture/culture

    Switch a PyPI package install between the production index, TestPyPI pre-release builds, and a local editable checkout.

    115 GitHub stars~711 tokensUpdated today
    Auto-check passed

  • Run Tests

    agentculture/culture

    Run pytest with parallel execution and coverage. An agent skill from agentculture/culture.

    115 GitHub stars~565 tokensUpdated today
    Auto-check passed

Categories

Questions about Sonarclaude

What does Sonarclaude do?

Query SonarCloud API for code quality data. An agent skill from agentculture/culture. Sonarclaude is an agent skill from agentculture/culture. Query SonarCloud API for code quality data.

When should I use Sonarclaude?

Sonarclaude fits situations like: : checking quality gate status; fetching code issues; security hotspots; reviewing metrics (coverage.

How do I install Sonarclaude in Claude Code?

Run `npx skills add agentculture/culture --skill sonarclaude -a claude-code`. Or copy the skill folder (.claude/skills/sonarclaude in agentculture/culture) into .claude/skills/sonarclaude in your project. Claude Code loads it when a task matches its description.

How do I install Sonarclaude in Codex?

Run `npx skills add agentculture/culture --skill sonarclaude -a codex`. Or copy the skill folder (.claude/skills/sonarclaude in agentculture/culture) into .agents/skills/sonarclaude in your project. Codex loads it when a task matches its description.

Can I use Sonarclaude in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add agentculture/culture --skill sonarclaude -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sonarclaude, .gemini/skills/sonarclaude, .github/skills/sonarclaude and .opencode/skills/sonarclaude in your project.

What does Sonarclaude need to run?

Going by SKILL.md and its folder, Sonarclaude needs a shell for the scripts in its folder, the command-line tools its instructions call (bash) and credentials named SONAR_TOKEN. Our summary lists: A Bash shell; A credential in SONAR_TOKEN.

Does Sonarclaude access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Sonarclaude safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Sonarclaude use?

Sonarclaude is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Sonarclaude use?

About 764 tokens (SKILL.md is roughly 3.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Sonarclaude?

Skills that share tags, products or a category with Sonarclaude: Qe Quality Assessment (proffesor-for-testing/agentic-qe, 495 stars), Code Quality Gate Checker (telagod/code-abyss, 244 stars), Constraint-Driven Development (addyosmani/agent-skills, 105k stars) and AI Development Guide (shinpr/claude-code-workflows, 694 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Sonarclaude?

agentculture (a GitHub organization) maintains it in agentculture/culture, which has 115 GitHub stars. The repository holds 19 skills in this directory. The repository was last updated on October 10, 2026.

Source: agentculture/culture on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.