Agent skill

Code Quality Checks

Enforce code quality with SonarCloud, CheckStyle, SpotBugs, and maintain quality gates

Apache-2.0Auto-check passedDevelopment

Install Code Quality Checks

skills CLI

$ npx skills add Hack23/cia --skill code-quality-checks -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install Hack23/cia code-quality-checks --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/code-quality-checks .claude/skills/code-quality-checks && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "code-quality-checks" agent skill from https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks into .claude/skills/code-quality-checks/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-quality-checks", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add Hack23/cia --skill code-quality-checks -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install Hack23/cia code-quality-checks --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.github/skills/code-quality-checks .agents/skills/code-quality-checks && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "code-quality-checks" agent skill from https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks into .agents/skills/code-quality-checks/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-quality-checks", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add Hack23/cia --skill code-quality-checks -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install Hack23/cia code-quality-checks --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.github/skills/code-quality-checks .cursor/skills/code-quality-checks && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "code-quality-checks" agent skill from https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks into .cursor/skills/code-quality-checks/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-quality-checks", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/Hack23/cia.git --path .github/skills/code-quality-checks

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add Hack23/cia --skill code-quality-checks -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install Hack23/cia code-quality-checks --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.github/skills/code-quality-checks .gemini/skills/code-quality-checks && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "code-quality-checks" agent skill from https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks into .gemini/skills/code-quality-checks/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-quality-checks", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install Hack23/cia code-quality-checks

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add Hack23/cia --skill code-quality-checks -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .github/skills && cp -r skills-src/.github/skills/code-quality-checks .github/skills/code-quality-checks && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "code-quality-checks" agent skill from https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks into .github/skills/code-quality-checks/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-quality-checks", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add Hack23/cia --skill code-quality-checks -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install Hack23/cia code-quality-checks --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.github/skills/code-quality-checks .opencode/skills/code-quality-checks && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "code-quality-checks" agent skill from https://github.com/Hack23/cia/tree/master/.github/skills/code-quality-checks into .opencode/skills/code-quality-checks/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "code-quality-checks", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: code-quality-checks
GitHub stars: 239
Token cost: ~327 tokens
SKILL.md length: 44 words
Files: 1
Skills in repo: 78
Repo updated: Oct 6, 2026
First seen: Oct 7, 2026
Licence: Apache-2.0

At a glance

Enforce code quality with SonarCloud, CheckStyle, SpotBugs, and maintain quality gates

Tasks that involve Code quality
SKILL.md covers Purpose, When to Use, SonarCloud Quality Gates and CheckStyle Configuration, plus 2 more sections
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
Tasks that involve Quality gates

What it does

Code Quality Checks is an agent skill from Hack23/cia. Enforce code quality with SonarCloud, CheckStyle, SpotBugs, and maintain quality gates

Its SKILL.md is about 330 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development, covering Code quality and Quality gates. The repository describes itself as: Citizen Intelligence Agency. Open-source intelligence platform analyzing Swedish political activities using AI and data visualization. Tracks politicians, government… The licence is Apache-2.0.

When your agent uses it

Tasks that involve Code quality
Tasks that involve Quality gates

Example prompts

“/code-quality-checks”

What it can do on your machine

Read from SKILL.md and the folder at commit 6a9797b. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md (its code samples are xml and yaml).
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
- sonarcloud.io
- checkstyle.org
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Code Quality Checks loads about 327 tokens when it runs. Until then it costs about 27 tokens; SKILL.md has 44 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~27
When it runs · the whole SKILL.md, loaded when a task matches: ~327

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from Hack23/cia at commit 6a9797b, republished under its Apache-2.0 licence (© Hack23). 44 words, ~327 tokens.

Download SKILL.mdSave it as .claude/skills/code-quality-checks/SKILL.md (or your agent's skills folder).

name: code-quality-checks
description: Enforce code quality with SonarCloud, CheckStyle, SpotBugs, and maintain quality gates
license: Apache-2.0

Code Quality Checks Skill

Purpose

Maintain high code quality through automated static analysis and quality gates.

When to Use

✅ Before committing code
✅ In CI/CD pipeline
✅ During code reviews
✅ Regular quality audits

SonarCloud Quality Gates

yaml

# sonar-project.properties
sonar.projectKey=Hack23_cia
sonar.organization=hack23
sonar.qualitygate.wait=true

# Quality Gate Thresholds
sonar.coverage.minimum=80
sonar.duplications.maximum=3
sonar.maintainability.rating=A
sonar.reliability.rating=A
sonar.security.rating=A

CheckStyle Configuration

xml

<module name="Checker">
    <module name="LineLength">
        <property name="max" value="120"/>
    </module>
    <module name="TreeWalker">
        <module name="NeedBraces"/>
        <module name="AvoidStarImport"/>
        <module name="UnusedImports"/>
    </module>
</module>

Maven Quality Plugin

xml

<plugin>
    <groupId>org.sonarsource.scanner.maven</groupId>
    <artifactId>sonar-maven-plugin</artifactId>
    <version>3.10.0.2594</version>
</plugin>

References

SonarCloud: https://sonarcloud.io/
CheckStyle: https://checkstyle.org/

Files

Just SKILL.md in .github/skills/code-quality-checks of Hack23/cia.

Open the folder on GitHubat commit 6a9797b

Compare with similar skills

Code Quality Checks next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Code Quality Checks compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Code Quality Checks this skillHack23/cia	239	—	~327	Automated safety check: Pass	Apache-2.0	yesterday
Constraint-Driven Developmentaddyosmani/agent-skills	102k	2 repos	~5.2k	Automated safety check: Pass	MIT	4 days ago
Sonarclaudeagentculture/culture	113	—	~764	Automated safety check: Pass	Apache-2.0	1 mo ago
Qe Quality Assessmentproffesor-for-testing/agentic-qe	494	—	~1.9k	Automated safety check: Pass	MIT	3 days ago
Code Qualitynotque/vexjoy-agent	435	—	~1.5k	Automated safety check: Notes	MIT	4 days ago
Dev ReviewFHIR/fhir-codegen	154	—	~5k	Automated safety check: Pass	MIT	1 mo ago

Similar skills

Constraint-Driven Development
addyosmani/agent-skills
Records a project's quality bar in CONSTRAINTS.md and watches diffs for signs an agent quietly weakened it, such as suppressions, skipped tests or lowered thresholds.
102k GitHub starsUsed in 2 repos~5.2k tokens
DevelopmentAuto-check passed
Sonarclaude
agentculture/culture
Query SonarCloud API for code quality data. An agent skill from agentculture/culture.
113 GitHub stars~764 tokensUpdated 1 mo ago
DevelopmentAuto-check passed
Qe Quality Assessment
proffesor-for-testing/agentic-qe
Evaluates code quality through complexity analysis, lint results, code smell detection, and test health metrics.
494 GitHub stars~1.9k tokensUpdated 3 days ago
DevelopmentAuto-check passed
Code Quality
notque/vexjoy-agent
Code quality: cleanup, linting, formatting, quality gates. An agent skill from notque/vexjoy-agent.
435 GitHub stars~1.5k tokensUpdated 4 days ago
DevelopmentAuto-check: notes
Dev Review
FHIR/fhir-codegen
Performs a two-track code-quality and QA review in the roles of a staff-level Engineering Lead and QA Lead, then synthesizes both critiques into a single analysis.md.
154 GitHub stars~5k tokensUpdated 1 mo ago
Testing & QAAuto-check passed
Code Quality Gate Checker
telagod/code-abyss
Checks cyclomatic complexity, function and file length, parameter count, nesting depth and naming conventions against fixed thresholds, with a bundled Node.js script and hotspot integration.
244 GitHub stars~609 tokensUpdated 2 mo ago
DevelopmentAuto-check: notes

Questions about Code Quality Checks

What does Code Quality Checks do?

Enforce code quality with SonarCloud, CheckStyle, SpotBugs, and maintain quality gates. Code Quality Checks is an agent skill from Hack23/cia.

When should I use Code Quality Checks?

Code Quality Checks fits situations like: tasks that involve Code quality; tasks that involve Quality gates.

How do I install Code Quality Checks in Claude Code?

Run `npx skills add Hack23/cia --skill code-quality-checks -a claude-code`. Or copy the skill folder (.github/skills/code-quality-checks in Hack23/cia) into .claude/skills/code-quality-checks in your project. Claude Code loads it when a task matches its description.

How do I install Code Quality Checks in Codex?

Run `npx skills add Hack23/cia --skill code-quality-checks -a codex`. Or copy the skill folder (.github/skills/code-quality-checks in Hack23/cia) into .agents/skills/code-quality-checks in your project. Codex loads it when a task matches its description.

Can I use Code Quality Checks in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Hack23/cia --skill code-quality-checks -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/code-quality-checks, .gemini/skills/code-quality-checks, .github/skills/code-quality-checks and .opencode/skills/code-quality-checks in your project.

What does Code Quality Checks need to run?

SKILL.md names no scripts, command-line tools or credentials: Code Quality Checks is instructions for the agent only.

Does Code Quality Checks access the network?

SKILL.md names 2 domains. As links in the text: sonarcloud.io and checkstyle.org. This is read from the text; nothing was executed.

Is Code Quality Checks safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Code Quality Checks use?

Code Quality Checks is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Code Quality Checks use?

About 327 tokens (SKILL.md is roughly 1.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Code Quality Checks?

Skills that share tags, products or a category with Code Quality Checks: Constraint-Driven Development (addyosmani/agent-skills, 102k stars), Sonarclaude (agentculture/culture, 113 stars), Qe Quality Assessment (proffesor-for-testing/agentic-qe, 494 stars) and Code Quality (notque/vexjoy-agent, 435 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Code Quality Checks?

Hack23 (a GitHub organization) maintains it in Hack23/cia, which has 239 GitHub stars. The repository holds 78 skills in this directory. The repository was last updated on October 6, 2026.

Source: Hack23/cia on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Code Quality Checks

Install Code Quality Checks

Facts

At a glance

What it does

When your agent uses it

Example prompts

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Code Quality Checks Skill

Purpose

When to Use

SonarCloud Quality Gates

CheckStyle Configuration

Maven Quality Plugin

References

Files

Compare with similar skills

Similar skills

Constraint-Driven Development

Sonarclaude

Qe Quality Assessment

Code Quality

Dev Review

Code Quality Gate Checker

More from Hack23/cia

Accessibility Wcag Patterns

Advanced Data Visualization

AI Governance

API Integration

AWS Cloudwatch Monitoring

AWS Security Architecture

Questions about Code Quality Checks

Install Code Quality Checks

Facts

At a glance

What it does

When your agent uses it

Example prompts

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Code Quality Checks Skill

Purpose

When to Use

SonarCloud Quality Gates

CheckStyle Configuration

Maven Quality Plugin

References

Files

Compare with similar skills

Similar skills

More from Hack23/cia

Related

Questions about Code Quality Checks