sonar-integrate
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves installation and maintenance scripts from the official SonarSource GitHub repository.
- [REMOTE_CODE_EXECUTION]: To install the CLI, the skill provides and executes commands that download and pipe scripts directly to shell interpreters (bash and PowerShell). These operations are conducted against the vendor's verified infrastructure.
- [COMMAND_EXECUTION]: The skill invokes various local CLI functions to manage authentication and agent hooks, including
sonar auth status,sonar self-update, andsonar integrate. - [DATA_EXPOSURE]: The skill handles authentication status but explicitly ensures that sensitive tokens are managed via the system keychain and are not exposed within the agent's conversational context.
Audit Metadata