CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

sonarqube-maintainability-gate

Use when a team wants maintainability and technical-debt ratings to gate PRs, or a SonarQube project reports numbers nobody tied to a gate. Runs SonarQube or SonarCloud on production code for code smells, bugs and maintainability ratings, the maintainability view rather than security.

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is testland/sonarqube-maintainability-gate

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an efficient, highly actionable 5-step workflow with concrete config, commands, and CI YAML, and an explicit quality-gate validation checkpoint. Its main gaps are minor: a few trimmable explanations of concepts Claude already knows, an implicit rather than explicit remediation loop after a failed gate, and slightly redundant reference link labels.

DimensionReasoningScore

Conciseness

The body is dominated by lean, high-value tables and copy-paste snippets, but a few tokens could be trimmed: the Clean Code attribute enumeration ("Consistent, Intentional, Adaptable, Responsible") and the test-code rationale ("long names, deliberate duplication for clarity, Arrange-Act-Assert patterns") restate knowledge Claude already has. Efficient with minor instances of over-explanation, matching 4 rather than 5.

4 / 5

Actionability

Fully executable guidance throughout: a stack-to-scanner table, a complete sonar-project.properties example, ready-to-run sonar-scanner commands for both local and PR analysis, a metric/threshold dashboard table, and a copy-paste GitHub Actions workflow with the quality-gate check. The pieces compose into a runnable pipeline covering the common cases, matching 5; no meaningful gaps keep it at 4.

5 / 5

Workflow Clarity

A clear 5-step sequence (install, scope, run, interpret dashboard, enforce gate) with an explicit validation checkpoint (the gate action "fails the build if it's RED") and result-interpretation in Step 4. Not 5 because the fix-and-re-run error-recovery loop is implicit, distributed into the anti-patterns table rather than stated as a workflow step; not 3 because checkpoints are present and explicit. Scanner runs are non-destructive analysis, so the destructive-operation cap does not apply.

4 / 5

Progressive Disclosure

A well-sectioned single file with no bundle; appropriately overview-level content kept inline and per-build-tool detail delegated to clearly signaled, one-level-deep external doc links in a References section. Minor organization gaps (the [Issues introduction] and [Sonar Way QG] links resolve to the same URL, slightly redundant labeling) keep it at 4 rather than 5.

4 / 5

Total

17

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with an explicit Use-when clause containing two concrete trigger scenarios, a clear statement of what the skill does, and an explicit boundary against the security lens. Keyword coverage is good, though "quality gate" and a few synonymous trigger phrases are missing and the second trigger condition is slightly broad.

DimensionReasoningScore

Specificity

"Runs SonarQube or SonarCloud on production code for code smells, bugs and maintainability ratings" plus "gate PRs" lists several concrete actions, but CI/gate setup is not named as an action and the closing clause is scoping rather than capability. Not 5 because of these minor coverage gaps; well above 3 given multiple specific actions.

4 / 5

Completeness

Explicitly answers both: what ("Runs SonarQube or SonarCloud on production code for code smells, bugs and maintainability ratings") and when, via an explicit "Use when" clause with two concrete trigger conditions ("ratings to gate PRs"; "a SonarQube project reports numbers nobody tied to a gate"). Not 4 because the when-clause is specific, not merely present.

5 / 5

Trigger Term Quality

Natural terms users would say are present ("maintainability", "technical-debt", "gate PRs", "code smells", "SonarQube", "SonarCloud"), but common variations like "quality gate" and "code quality" are missing. Coverage is good with a few natural terms absent, matching the 4 anchor.

4 / 5

Distinctiveness Conflict Risk

The explicit carve-out "the maintainability view rather than security" distinguishes it from a sibling SonarQube security skill, but the vague second trigger ("reports numbers") and bare "SonarQube" mentions leave minor overlap risk with that closely related skill. Mostly distinct with minor overlap, matching 4 rather than 5.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

testland/qa

Path

plugins/qa-code-quality/skills/sonarqube-maintainability-gate/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.