sonarqube
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
sonarCLI to perform various tasks such as project discovery, quality gate checks, and code analysis. Commands are standard for the tool's intended use.\n- [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration files from official SonarSource GitHub repositories and domains. These are well-known and reputable services.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from repository configuration files (e.g.,sonar-project.properties) and API responses. It provides guidance on sanitizing user-controlled values through URL-encoding and prefers structured JSON for data handling to minimize injection risks.
Audit Metadata