skills.rest
J03Fr0st
J03Fr0stCOMMUNITY
Explore all skills by this author →
GitHub

sonarqube-review

Analyze code for bugs, vulnerabilities, and code smells using SonarQube-like rules.

Updated Jan 26, 2026
Search Tags:#code quality#quality assurance#static analysis#code review#security#sonarqube
One-click install
npx skills add https://github.com/J03Fr0st/maestro --skill sonarqube-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sonarqube-review
Source: https://github.com/J03Fr0st/maestro/tree/main/.github/skills/sonarqube-review
Command: npx skills add https://github.com/J03Fr0st/maestro --skill sonarqube-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of reviewing code quality and identifying potential issues, ensuring adherence to best practices and security standards.

Core Features & Use Cases

  • Code Quality Analysis: Identifies bugs, vulnerabilities, code smells, and security hotspots based on SonarQube-like rules.
  • Quality Gate Assessment: Evaluates code against predefined quality gate criteria (e.g., issue severity, coverage).
  • Use Case: Before merging a pull request, use this Skill to perform a comprehensive code review, flagging critical bugs and security vulnerabilities to prevent them from reaching production.

Quick Start

Use the sonarqube-review skill to analyze the provided code snippet for bugs and vulnerabilities.

Frequently Asked Questions about sonarqube-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate code review for security vulnerabilities before merging a pull request?▼

Automated code review for security vulnerabilities uses static analysis to identify bugs and security hotspots in code snippets before pull requests reach production. This process applies SonarQube-like rules to flag issues based on predefined severity levels.

What is static code analysis and how does it identify code smells?▼

Static code analysis examines source code without executing it to detect code smells, vulnerabilities, and bugs. It evaluates code patterns against defined quality assurance rules to highlight areas violating best practices and security standards.

Can I use this static analysis to check TypeScript and Python code?▼

Yes, static analysis can check TypeScript and Python code, along with C#. It applies quality gate criteria and security audits across these programming languages to ensure adherence to defined issue severity levels.

How do I assess code quality against predefined quality gate criteria?▼

Code quality assessment evaluates code against predefined quality gate criteria, such as issue severity and coverage. It reports whether the code meets these thresholds by applying static analysis rules to identify failing conditions.

What is the best way to perform a security audit on a code snippet?▼

The best way to perform a security audit on a code snippet is applying static analysis to pinpoint security hotspots and vulnerabilities. This identifies critical issues before merging by checking adherence to security standards.

Related Skills

Explore More Software Engineering Skills→
OlshanskOlshansk
10

makefile

Generate Makefiles from templates for common project stacks.

Community
Advanced
io-wyio-wy

code-reviewer

Analyze code diffs and files for bugs, vulnerabilities, and code smells.

Community
Advanced
hidonguyenhidonguyen

ck:test

Execute unit, integration, e2e, and UI tests across JavaScript/TypeScript, Python, Go, Rust, and Flutter projects.

Community
Advanced
eliottbusinesseliottbusiness

requesting-code-review

Automate pre-commit code review with static analysis and security scanning.

Community
Advanced