deepsource

Retrieve code review issues, vulnerabilities, and report cards from DeepSource via CLI.

Updated Jul 17, 2026
One-click install
npx skills add https://github.com/unnxt30/skills --skill deepsource-unnxt30
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: deepsource
Source: https://github.com/unnxt30/skills/tree/main/deepsource
Command: npx skills add https://github.com/unnxt30/skills --skill deepsource-unnxt30

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? It gives you programmatic access to DeepSource code quality and security analysis results without opening the web dashboard, so you can pull issues, CVEs, and report cards directly into your terminal or AI-assisted workflow. ## Core Features & Use Cases - Issue Retrieval: List code review issues filtered by severity, category, path, PR, or branch in JSON format. - Security & Vulnerability Reports: Fetch dependency CVEs and security findings scoped to a PR, commit, or default branch. - Report Cards & Run Status: Get A-F grades for security, reliability, complexity, hygiene, and coverage, plus analysis run history. - Use Case: Before merging a pull request, ask for all critical security issues on PR 42 and the PR's report card to decide whether the branch is ready to merge. ## Quick Start Ask the assistant to show all critical and major issues for the current repository using the DeepSource CLI.

Frequently Asked Questions about deepsource

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get DeepSource issues from the command line?

Run deepsource issues --output json after authenticating with deepsource auth login. You can filter by severity, category, or path, and scope results to a PR, commit, or the default branch.

How to check code vulnerabilities with DeepSource CLI?

Run deepsource vulnerabilities --output json to list security findings. Add --severity critical,high to filter, or use --pr or --default-branch to scope the results to a specific context.

Does DeepSource CLI work outside a git repository?

Yes, but auto-detection only works inside a git repo. Outside one, pass --repo provider/owner/name where the provider is gh, gl, bb, or ads to target the repository explicitly.

Can I combine --pr, --commit, and --default-branch flags?

No, the scope flags are mutually exclusive and cannot be combined. Omit all three to use the auto-detected current branch, or pick exactly one to override it.

What does the DeepSource report card include?

The report card returns A-F grades and scores for security, reliability, complexity, hygiene, and coverage, plus an aggregate score. It can be scoped to a PR or commit using the corresponding flags.