sonar-quality-gate
Warn
Audited by Snyk on Jul 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). This skill explicitly instructs the agent to invoke the sonar-integrate skill (which installs/updates the sonarqube-cli and re-configures the SonarQube MCP server and hooks) and to start/check container runtimes (docker/podman/nerdctl), which pushes the agent to perform system-level installations and configuration changes that modify the machine state.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata