sonarqube

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the sonar CLI to perform various tasks such as project discovery, quality gate checks, and code analysis. Commands are standard for the tool's intended use.\n- [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration files from official SonarSource GitHub repositories and domains. These are well-known and reputable services.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from repository configuration files (e.g., sonar-project.properties) and API responses. It provides guidance on sanitizing user-controlled values through URL-encoding and prefers structured JSON for data handling to minimize injection risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 10:14 AM
Security Audit — agent-trust-hub — sonarqube