SonarQube Code Quality Scanner

Pass

Audited by Socket on Jun 22, 2026

Checks
Malicious behaviorInjection, exfiltration, untrusted installs
Security concernsCredential exposure, tool/trust exploitation
Code obfuscationHidden or obfuscated code
Suspicious patternsReconnaissance, excessive autonomy, resource use
Audit Metadata
Analyzed At
Jun 22, 2026, 02:06 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fsonarqube-code-quality-scanner%2F@04712c3f5ec533d663a558232e1e70f6c9b93bab
Security Audit — socket — SonarQube Code Quality Scanner