codacy-analysis-cli
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@codacy/analysis-cliofficial package from the NPM registry to enable local analysis.\n- [REMOTE_CODE_EXECUTION]: The CLI provides a mechanism to download and setup standard static analysis tool binaries (such as Ruff, Semgrep, and ESLint) into a dedicated machine-wide directory (~/.codacy/) using the--install-dependenciesflag.\n- [COMMAND_EXECUTION]: Orchestrates the execution of various static analysis tools on the local filesystem to detect bugs, security issues, and linting violations.\n- [CREDENTIALS_UNSAFE]: Documents the optional use of API tokens and the vendor-specific credential file~/.codacy/credentialsfor synchronizing configurations with the Codacy platform.
Audit Metadata