CtrlK
BlogDocsLog inGet started
Tessl Logo

testland/sonarqube-rules

Configures and runs SonarQube / SonarCloud - multi-language SAST + Quality Gate platform with built-in Sonar Way rule profiles + custom rule plugins; integrates `sonar-scanner` with `sonar-project.properties` config; supports Quality Gate definitions including new-code-period blocking, branch + PR analysis, and per-issue suppression via `// NOSONAR` comment or `@SuppressWarnings("squid:RULE_ID")` annotation. Use when the user runs SonarQube Community / Developer / Enterprise edition or SonarCloud, or needs a multi-language SAST + code-quality platform with persistent issue tracking.

69

Quality

87%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Overview
Quality
Evals
Security
Files

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured, actionable skill body with clear sequencing and useful checkpoints across the SonarQube workflow. Weakest on actionability placeholders and the absence of explicit error-recovery feedback loops, both of which keep it at 4 rather than 5.

Suggestions

Replace the Quality Gate condition placeholders ('≥ X%', '≤ Y%') with the actual Sonar Way default thresholds so the guidance is copy-paste ready.

Add a short validate→fix→retry loop for CI failures (e.g., what to do when the quality-gate-action reports a failed gate) to reach a 5 on workflow clarity.

Consider extracting the REST API endpoint table and full Quality Gate condition list into a reference file to improve progressive disclosure now that no bundle files exist.

DimensionReasoningScore

Conciseness

Efficient use of bullets, tables, and code blocks that assumes Claude's intelligence; a few editorializing asides ('the audit trail is the value over Semgrep's per-comment approach') could be trimmed.

4 / 5

Actionability

Provides copy-paste-ready docker, scanner, properties, and CI examples, but Quality Gate conditions use placeholders ('≥ X%', '≤ Y%') rather than concrete default values.

4 / 5

Workflow Clarity

Clear numbered Steps 1–8 with explicit critical checkpoints (fetch-depth: 0, qualitygate.wait, mandatory NOSONAR template), but lacks an explicit validate→fix→retry feedback loop for CI analysis failures.

4 / 5

Progressive Disclosure

Well-organized sections with one-level-deep external doc links and sister-skill references, but no bundle files exist so heavier material (REST API reference, gate conditions) is inlined rather than split into separate reference files.

4 / 5

Total

16

/

20

Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly answers both what the skill does and when to use it, with concrete product-specific triggers and low conflict risk. Minor improvement possible by adding a few more natural user phrasings among the trigger terms.

DimensionReasoningScore

Specificity

Lists multiple concrete actions (configures/runs, integrates sonar-scanner, defines Quality Gates, branch+PR analysis, per-issue suppression via NOSONAR/@SuppressWarnings) with comprehensive coverage of the platform's capabilities.

5 / 5

Completeness

Explicitly states what it does ('Configures and runs SonarQube / SonarCloud...') and when to use it ('Use when the user runs SonarQube Community / Developer / Enterprise edition or SonarCloud, or needs a multi-language SAST + code-quality platform...').

5 / 5

Trigger Term Quality

Strong keyword coverage including product names (SonarQube, SonarCloud), Sonar Way, sonar-scanner, NOSONAR, SAST, and code-quality, though a few natural user phrasings like 'run a Sonar scan' are implicit rather than enumerated.

4 / 5

Distinctiveness Conflict Risk

Clear product-specific niche (SonarQube/SonarCloud, Sonar Way profiles, persistent issue tracking) with distinct triggers; only minor overlap with sister SAST tools, which the skill itself acknowledges.

5 / 5

Total

19

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Reviewed

Table of Contents