Official agent skill

Sonar Quality Gate

by SonarSource in SonarSource/sonarqube-agent-plugins

Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns.

OfficialCustom licenceAuto-check passedTesting & QA

Install Sonar Quality Gate

skills CLI
$ npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-quality-gate -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install SonarSource/sonarqube-agent-plugins sonar-quality-gate --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/SonarSource/sonarqube-agent-plugins.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/sonar-quality-gate .claude/skills/sonar-quality-gate && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
sonar-quality-gate
GitHub stars
111
Token cost
~4.1k tokens
SKILL.md length
1,912 words
Files
1
Skills in repo
8
Repo updated
First seen
Licence
Custom licence

At a glance

Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns.

  • Works in 7 steps: Resolve the project key (only when needed) → Parse optional filters from the… → Run sonar quality-gate status → …
  • Tasks that involve Quality gates
  • SKILL.md covers Usage, Prerequisites and Instructions
  • Calls docker and podman

What it does

Sonar Quality Gate is an agent skill from SonarSource/sonarqube-agent-plugins, published by the product's own GitHub organization. Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns. Project key optional — resolved from sonar-project.properties or the MCP integration default.

Its SKILL.md is about 4.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Testing & QA, covering Quality gates and MCP servers. It works with Model Context Protocol. The repository describes itself as: SonarQube Plugin for AI Agents.

When your agent uses it

  • Tasks that involve Quality gates
  • Tasks that involve MCP servers

Example prompts

  • “/sonar-quality-gate”

Requirements

  • Docker
  • Pre-approved tools (allowed-tools): Read, Grep, Bash(docker ps:*), Bash(podman ps:*), Bash(nerdctl ps:*), Bash(sonar:*)

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. Resolve the project key (only when needed)
  2. Parse optional filters from the user-provided arguments
  3. Run sonar quality-gate status
  4. Format the results
  5. Treat failing conditions by category
  6. Deeper metrics (get_component_measures)
  7. Related skills

What it can do on your machine

Read from SKILL.md and the folder at commit 6142e57. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Bash(docker ps:*)
    • Bash(podman ps:*)
    • Bash(nerdctl ps:*)
    • Bash(sonar:*)

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • docker
    • podman

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • docs.sonarsource.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Sonar Quality Gate loads about 4.1k tokens when it runs. Until then it costs about 66 tokens; SKILL.md has 1,912 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~66
When it runs · the whole SKILL.md, loaded when a task matches
~4.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,912 words (~4,071 tokens).

“Report only the quality gate evaluation for a SonarQube project: overall status, every condition returned by the API, and worst-offender breakdowns for failing conditions. Do not pull a broad measures dashboard here — for numeric metrics beyond the gate (coverage…”

— opening of SKILL.md by SonarSource, Custom licence
name
sonar-quality-gate
allowed-tools
Read, Grep, Bash(docker ps:*), Bash(podman ps:*), Bash(nerdctl ps:*), Bash(sonar:*)
argument-hint
[project-key?] [--branch name] [--pr id]

Read the full SKILL.md on GitHub

Files

Just SKILL.md in skills/sonar-quality-gate of SonarSource/sonarqube-agent-plugins.

Open the folder on GitHubat commit 6142e57

Compare with similar skills

Sonar Quality Gate next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Sonar Quality Gate compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Sonar Quality Gate this skillSonarSource/sonarqube-agent-plugins111—~4.1kAutomated safety check: PassCustom licence
Suede MCP Release QAJasonColapietro/suede-creator-skills127—~2.1kAutomated safety check: PassMIT
Pcb Designoaslananka/kicad-mcp-pro120—~1.5kAutomated safety check: PassMIT
Schematic Reviewoaslananka/kicad-mcp-pro120—~1.1kAutomated safety check: PassMIT
Sonarqube MCPgiuseppe-trisciuoglio/developer-kit355—~3.3kAutomated safety check: PassMIT
Qwen Code E2E TestingQwenLM/qwen-code28k—~2.1kAutomated safety check: PassApache-2.0

Similar skills

  • Suede MCP Release QA

    JasonColapietro/suede-creator-skills

    Checks a Suede AI MCP server release against a live process: the full JSON-RPC lifecycle, schemas, annotations, malformed input, catalog agreement and install docs.

    127 GitHub stars~2.1k tokensUpdated today
    Testing & QAAuto-check passed
  • Pcb Design

    oaslananka/kicad-mcp-pro

    Safe KiCad PCB design assistance workflow using KiCad MCP board inspection, placement, routing, stackup, and quality-gate tools.

    120 GitHub stars~1.5k tokensUpdated today
    Testing & QAAuto-check passed
  • Schematic Review

    oaslananka/kicad-mcp-pro

    KiCad MCP schematic inspection and review workflow using ERC, connectivity, symbol, net, power, readability, and quality-gate tools.

    120 GitHub stars~1.1k tokensUpdated today
    Testing & QAAuto-check passed
  • Sonarqube MCP

    giuseppe-trisciuoglio/developer-kit

    Provides SonarQube and SonarCloud integration patterns via the Model Context Protocol (MCP) server.

    355 GitHub stars~3.3k tokensUpdated 28 days ago
    Testing & QAAuto-check passed
  • Qwen Code E2E Testing

    QwenLM/qwen-code

    Guides end-to-end testing of the Qwen Code CLI in headless mode with real model calls, MCP test servers and inspection of raw API traffic.

    28k GitHub stars~2.1k tokensUpdated today
    Testing & QAAuto-check passed
  • Adding LLM MCP Tools

    TriliumNext/Trilium

    A skill your agent uses when adding, changing, or reviewing an LLM/MCP tool in Trilium (the defineTools definitions under packages/trilium-core/src/services/llm/tools/ —…

    38k GitHub stars~2.5k tokensUpdated today
    Testing & QAAuto-check passed

More from SonarSource/sonarqube-agent-plugins

All 8 skills in this repo
  • Sonar Analyze

    SonarSource/sonarqube-agent-plugins

    Official

    Analyze a file for quality and security issues using SonarQube

    111 GitHub stars~1.8k tokensUpdated yesterday
    Auto-check passed
  • Sonar Coverage

    SonarSource/sonarqube-agent-plugins

    Official

    Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)

    111 GitHub stars~2.1k tokensUpdated yesterday
    Auto-check passed
  • Sonar Dependency Risks

    SonarSource/sonarqube-agent-plugins

    Official

    Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)

    111 GitHub stars~1.9k tokensUpdated yesterday
    Auto-check passed
  • Sonar Duplication

    SonarSource/sonarqube-agent-plugins

    Official

    Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)

    111 GitHub stars~2.4k tokensUpdated yesterday
    Auto-check passed
  • Sonar Fix Issue

    SonarSource/sonarqube-agent-plugins

    Official

    Fix a specific SonarQube issue in code by rule key and location

    111 GitHub stars~551 tokensUpdated yesterday
    Auto-check passed
  • Sonar List Issues

    SonarSource/sonarqube-agent-plugins

    Official

    Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (-p is always required on the CLI; resolve the key from user arguments or sonar-project.properties)

    111 GitHub stars~1.6k tokensUpdated yesterday
    Auto-check passed

Categories

Questions about Sonar Quality Gate

What does Sonar Quality Gate do?

Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns. Sonar Quality Gate is an agent skill from SonarSource/sonarqube-agent-plugins, published by the product's own GitHub organization. Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns.

When should I use Sonar Quality Gate?

Sonar Quality Gate fits situations like: tasks that involve Quality gates; tasks that involve MCP servers.

How do I install Sonar Quality Gate in Claude Code?

Run `npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-quality-gate -a claude-code`. Or copy the skill folder (skills/sonar-quality-gate in SonarSource/sonarqube-agent-plugins) into .claude/skills/sonar-quality-gate in your project. Claude Code loads it when a task matches its description.

How do I install Sonar Quality Gate in Codex?

Run `npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-quality-gate -a codex`. Or copy the skill folder (skills/sonar-quality-gate in SonarSource/sonarqube-agent-plugins) into .agents/skills/sonar-quality-gate in your project. Codex loads it when a task matches its description.

Can I use Sonar Quality Gate in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-quality-gate -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sonar-quality-gate, .gemini/skills/sonar-quality-gate, .github/skills/sonar-quality-gate and .opencode/skills/sonar-quality-gate in your project.

What does Sonar Quality Gate need to run?

Going by SKILL.md and its folder, Sonar Quality Gate needs the command-line tools its instructions call (docker and podman). Our summary lists: Docker. Its frontmatter pre-approves these tools: Read, Grep, Bash(docker ps:*), Bash(podman ps:*), Bash(nerdctl ps:*), Bash(sonar:*).

Does Sonar Quality Gate access the network?

SKILL.md names 1 domain. As links in the text: docs.sonarsource.com. This is read from the text; nothing was executed.

Is Sonar Quality Gate safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Sonar Quality Gate use?

Sonar Quality Gate has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Sonar Quality Gate use?

About 4.1k tokens (SKILL.md is roughly 16k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Sonar Quality Gate?

Skills that share tags, products or a category with Sonar Quality Gate: Suede MCP Release QA (JasonColapietro/suede-creator-skills, 127 stars), Pcb Design (oaslananka/kicad-mcp-pro, 120 stars), Schematic Review (oaslananka/kicad-mcp-pro, 120 stars) and Sonarqube MCP (giuseppe-trisciuoglio/developer-kit, 355 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Sonar Quality Gate?

SonarSource (a GitHub organization, an official publisher) maintains it in SonarSource/sonarqube-agent-plugins, which has 111 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on October 7, 2026.

Source: SonarSource/sonarqube-agent-plugins on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.