New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Official agent skill

Sonar List Issues

by SonarSource in SonarSource/sonarqube-agent-plugins

Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (-p is always required on the CLI; resolve the key from user arguments or sonar-project.properties)

OfficialCustom licenceAuto-check passedDevelopment

Install Sonar List Issues

skills CLI
$ npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-list-issues -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install SonarSource/sonarqube-agent-plugins sonar-list-issues --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/SonarSource/sonarqube-agent-plugins.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sonar-list-issues .claude/skills/sonar-list-issues && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
sonar-list-issues
GitHub stars
111
Token cost
~1.6k tokens
SKILL.md length
554 words
Files
1
Skills in repo
8
Repo updated
First seen
Licence
Custom licence

At a glance

Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (-p is always required on the CLI; resolve the key from user arguments or sonar-project.properties)

  • Works in 6 steps: Resolve the project key → Parse optional flags from the… → Validate arguments → …
  • Tasks that involve Pull requests
  • SKILL.md covers Usage, Prerequisites and Instructions
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Sonar List Issues is an agent skill from SonarSource/sonarqube-agent-plugins, published by the product's own GitHub organization. Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (-p is always required on the CLI; resolve the key from user arguments or sonar-project.properties)

Its SKILL.md is about 1.6k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development, covering Pull requests. The repository describes itself as: SonarQube Plugin for AI Agents.

When your agent uses it

  • Tasks that involve Pull requests

Example prompts

  • “/sonar-list-issues”

Requirements

  • Pre-approved tools (allowed-tools): Read, Grep, Bash(sonar:*)

Workflow steps

6 steps, taken from the step headings in SKILL.md.

  1. Resolve the project key
  2. Parse optional flags from the user-provided arguments
  3. Validate arguments
  4. Run sonar list issues
  5. Format the results
  6. Next steps

What it can do on your machine

Read from SKILL.md and the folder at commit 6142e57. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Bash(sonar:*)

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown and bash).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Sonar List Issues loads about 1.6k tokens when it runs. Until then it costs about 53 tokens; SKILL.md has 554 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~53
When it runs · the whole SKILL.md, loaded when a task matches
~1.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 554 words (~1,573 tokens).

“Search for issues in a SonarQube project using the sonarqube-cli.”

— opening of SKILL.md by SonarSource, Custom licence
name
sonar-list-issues
allowed-tools
Read, Grep, Bash(sonar:*)
argument-hint
[project-key?] [--severities values] [--statuses values] [--branch name]

Read the full SKILL.md on GitHub

Files

Just SKILL.md in skills/sonar-list-issues of SonarSource/sonarqube-agent-plugins.

Open the folder on GitHubat commit 6142e57

Compare with similar skills

Sonar List Issues next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Sonar List Issues compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Sonar List Issues this skillSonarSource/sonarqube-agent-plugins111—~1.6kAutomated safety check: PassCustom licence
Finishing a Development Branchobra/superpowers296k5 repos~1.9kAutomated safety check: PassMIT
PR Babysitteropeninterpreter/openinterpreter69k3 repos~4.2kAutomated safety check: PassApache-2.0
Check PRonyx-dot-app/onyx32k2 repos~2.3kAutomated safety check: PassMIT
Understand Diff AnalysisEgonex-AI/Understand-Anything86k1 repos~1.4kAutomated safety check: PassMIT
PR Design DocOpenHands/OpenHands90k—~2.4kAutomated safety check: PassMIT

Similar skills

  • Finishing a Development Branch

    obra/superpowers

    Walks the last step of a branch: confirm tests pass, detect the git environment, ask how to integrate, carry out your choice and clean up the worktree.

    296k GitHub starsUsed in 5 repos~1.9k tokens
    DevelopmentAuto-check passed

  • PR Babysitter

    openinterpreter/openinterpreter

    Watches an open GitHub pull request until it merges, handling review comments, diagnosing CI failures and retrying flaky checks along the way.

    69k GitHub starsUsed in 3 repos~4.2k tokens
    DevelopmentAuto-check passed

  • Check PR

    onyx-dot-app/onyx

    Checks a GitHub, GitLab, or Perforce (p4) pull request (or merge request, or shelved changelist) for unresolved review comments, failing status checks, and incomplete PR descriptions.

    32k GitHub starsUsed in 2 repos~2.3k tokens
    DevelopmentAuto-check passed

  • Understand Diff Analysis

    Egonex-AI/Understand-Anything

    Reads your git changes or a pull request against a prebuilt knowledge graph of the project to explain what changed, which components are affected and what is risky.

    86k GitHub starsUsed in 1 repo~1.4k tokens
    DevelopmentAuto-check passed

  • PR Design Doc

    OpenHands/OpenHands

    For a non-trivial pull request, write a self-contained HTML design doc under the temporary .pr/ directory and link a visibility-appropriate preview in the PR description, so maintainers grasp the…

    90k GitHub stars~2.4k tokensUpdated today
    DevelopmentAuto-check passed

  • WooCommerce Code Review

    woocommerce/woocommerce

    Reviews WooCommerce code changes against the project's standards, flagging backend PHP architecture, naming, documentation, data integrity and testing violations.

    11k GitHub starsUsed in 3 repos~1.1k tokens
    DevelopmentAuto-check passed

More from SonarSource/sonarqube-agent-plugins

All 8 skills in this repo

  • Sonar Analyze

    SonarSource/sonarqube-agent-plugins

    Official

    Analyze a file for quality and security issues using SonarQube

    111 GitHub stars~1.8k tokensUpdated today
    Auto-check passed

  • Sonar Coverage

    SonarSource/sonarqube-agent-plugins

    Official

    Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)

    111 GitHub stars~2.1k tokensUpdated today
    Auto-check passed

  • Sonar Dependency Risks

    SonarSource/sonarqube-agent-plugins

    Official

    Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)

    111 GitHub stars~1.9k tokensUpdated today
    Auto-check passed

  • Sonar Duplication

    SonarSource/sonarqube-agent-plugins

    Official

    Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)

    111 GitHub stars~2.4k tokensUpdated today
    Auto-check passed

  • Sonar Fix Issue

    SonarSource/sonarqube-agent-plugins

    Official

    Fix a specific SonarQube issue in code by rule key and location

    111 GitHub stars~551 tokensUpdated today
    Auto-check passed

  • Sonar List Projects

    SonarSource/sonarqube-agent-plugins

    Official

    List SonarQube projects accessible to the current user. An agent skill from SonarSource/sonarqube-agent-plugins.

    111 GitHub stars~741 tokensUpdated today
    Auto-check passed

Categories

Questions about Sonar List Issues

What does Sonar List Issues do?

Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (-p is always required on the CLI; resolve the key from user arguments or sonar-project.properties). Sonar List Issues is an agent skill from SonarSource/sonarqube-agent-plugins, published by the product's own GitHub organization.

When should I use Sonar List Issues?

Sonar List Issues fits situations like: tasks that involve Pull requests.

How do I install Sonar List Issues in Claude Code?

Run `npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-list-issues -a claude-code`. Or copy the skill folder (skills/sonar-list-issues in SonarSource/sonarqube-agent-plugins) into .claude/skills/sonar-list-issues in your project. Claude Code loads it when a task matches its description.

How do I install Sonar List Issues in Codex?

Run `npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-list-issues -a codex`. Or copy the skill folder (skills/sonar-list-issues in SonarSource/sonarqube-agent-plugins) into .agents/skills/sonar-list-issues in your project. Codex loads it when a task matches its description.

Can I use Sonar List Issues in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-list-issues -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sonar-list-issues, .gemini/skills/sonar-list-issues, .github/skills/sonar-list-issues and .opencode/skills/sonar-list-issues in your project.

What does Sonar List Issues need to run?

SKILL.md names no scripts, command-line tools or credentials: Sonar List Issues is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Grep, Bash(sonar:*).

Does Sonar List Issues access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Sonar List Issues safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Sonar List Issues use?

Sonar List Issues has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Sonar List Issues use?

About 1.6k tokens (SKILL.md is roughly 6.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Sonar List Issues?

Skills that share tags, products or a category with Sonar List Issues: Finishing a Development Branch (obra/superpowers, 296k stars), PR Babysitter (openinterpreter/openinterpreter, 69k stars), Check PR (onyx-dot-app/onyx, 32k stars) and Understand Diff Analysis (Egonex-AI/Understand-Anything, 86k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Sonar List Issues?

SonarSource (a GitHub organization, an official publisher) maintains it in SonarSource/sonarqube-agent-plugins, which has 111 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on October 7, 2026.

Source: SonarSource/sonarqube-agent-plugins on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.