Plugin

sonarqube

Integrate SonarQube code quality and security analysis into Claude Code: this includes namespaced slash commands, a guided skill to setup the SonarQube CLI, and a startup check for the CLI and wiring. MCP server registration and secrets-scanning hooks are installed on your machine by the SonarQube CLI as part of the setup.

• Published source
• Repository

Analysed

12 October 2026

Last observed

12 October 2026

What the code does

• Runs hooks automatically Hooks that execute without being called explicitly.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.