sonar-analyze
Analyze a file for quality and security issues using SonarQube
List SonarQube projects accessible to the current user
$ npx -y skills add SonarSource/sonarqube-agent-plugins --skill sonar-list-projects --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/sonar-list-projectsContext preview
The summary Claude sees to decide when to auto-load this skill.
List SonarQube projects accessible to the current user
name: sonar-list-projects description: List SonarQube projects accessible to the current user argument-hint: "[search-query]" allowed-tools: Bash(sonar:*)
List SonarQube projects accessible to the authenticated user. Useful for discovering project keys before running other skills.
sonar-list-projects # list all accessible projects sonar-list-projects my-project # search by name or key
This skill uses the `sonarqube-cli` command. The CLI must be installed and authenticated before proceeding.
**Before proceeding**, verify that `sonar` is available on your PATH and authenticated. If it is not, do not attempt to call any alternative commands or invent alternatives, and show the user:
> Unable to list projects. > > **Possible causes:** > - `sonarqube-cli` not installed or not authenticated — invoke the sonar-integrate skill
Then ask the user (yes/no) whether to run the sonar-integrate skill now. Briefly explain what it does: it checks the SonarQube setup on their machine — installing or updating `sonarqube-cli` and verifying authentication — and re-configures the integration for this agent, including the SonarQube MCP server and secrets-scanning hooks. If they confirm, invoke the sonar-integrate skill yourself and follow it end-to-end in this session, then re-check and continue; if they decline, stop.
If a `--query` search term was provided, validate it matches `^[a-zA-Z0-9_\-\. ]+$`. If it does not, stop and tell the user what was rejected — do not run the command.
Build and run the command using a shell command:
sonar list projects [--query <search-term>]
Only include `--query` if a search term was provided.
**If projects are found**:
## SonarQube Projects Found **8 project(s)**: | Project key | Name | | ----------------- | --------------- | | my-org_backend | Backend Service | | my-org_frontend | Frontend App | | my-org_shared-lib | Shared Library |
**If no projects are found**:
## SonarQube Projects No projects found. If you expected results, check your authentication with `sonar auth status`.
**If the result is paginated** (500 projects returned), note: *"Showing first 500 projects. Use a search term to narrow results."*
Made by Sonar SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets.
Analyze a file for quality and security issues using SonarQube
Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration…
Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration…
Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP…
Fix a specific SonarQube issue in code by rule key and location
Installs sonarqube-cli if not already installed, authenticates, and integrates SonarQube with the current agent (installs…