sonarqube
Warn
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The instructions suggest executing 'echo $SONARQUBE_TOKEN' to verify the environment variable, which can expose the secret token in plain text within terminal history and logs.
- [DYNAMIC_EXECUTION]: The skill generates and executes temporary bash and Node.js scripts (/tmp/fetch_sonar.sh and /tmp/sonar_analyze.js) by piping strings into the file system.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill transmits the SonarQube token to the external sonarcloud.io API for authentication. As this is a well-known service, it is documented as a functional requirement.
- [PERSISTENCE_MECHANISMS]: The skill guides the user to modify shell profile files (~/.bashrc and ~/.zshrc) to store the authentication token permanently.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the SonarCloud API, which represents an ingestion point for potentially attacker-controlled content.
- Ingestion points: SonarCloud API response data.
- Boundary markers: No explicit delimiters are used to wrap the untrusted API data.
- Capability inventory: Access to shell execution and file system operations.
- Sanitization: The analysis script does not sanitize the retrieved messages before reporting.
Audit Metadata