← 返回 Skills 市场
Sonarqube
作者
Membrane Dev
· GitHub ↗
· v1.0.1
· MIT-0
121
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install sonarqube
功能描述
SonarQube integration. Manage data, records, and automate workflows. Use when the user wants to interact with SonarQube data.
安全使用建议
This skill appears coherent: it uses the Membrane CLI to talk to SonarQube rather than doing raw API calls, and it doesn't request unrelated credentials. Before installing or running commands: (1) verify you trust Membrane (read privacy/Data Processing and the Membrane CLI package on npm and its GitHub repo); (2) review what access the Membrane connector will require for your SonarQube instance (who on Membrane can see your data); (3) prefer installing the CLI in an environment where you control the install (not as root on shared systems); and (4) in headless contexts be prepared to complete the manual login flow. Because the skill is instruction-only, there is no bundled code to scan—inspect the Membrane CLI code or documentation if you need higher assurance.
功能分析
Type: OpenClaw Skill
Name: sonarqube
Version: 1.0.1
The skill bundle provides instructions for an AI agent to integrate with SonarQube using the Membrane CLI. It outlines standard procedures for installing the `@membranehq/cli` npm package, performing authentication, and executing API actions through the Membrane platform. The instructions in SKILL.md are transparent, align with the stated purpose of the integration, and do not contain any indicators of malicious intent, data exfiltration, or harmful prompt injection.
能力评估
Purpose & Capability
The name/description (SonarQube integration) matches the instructions: the SKILL.md tells the agent to use the Membrane CLI to connect to SonarQube, list/create/run actions, and manage connections. No unrelated services, binaries, or secrets are requested by the skill itself.
Instruction Scope
Instructions stay within the stated purpose: install/run the Membrane CLI, authenticate via Membrane, create a SonarQube connection, and run/discover actions. The instructions do not ask the agent to read unrelated files or environment variables, nor to exfiltrate data to unexpected endpoints. They do rely on interactive browser-based or headless login flows handled by Membrane.
Install Mechanism
The skill bundle has no automatic install spec (instruction-only), but SKILL.md instructs the user to install @membranehq/cli globally via npm. Installing an external CLI is a normal choice for this integration but introduces typical supply-chain considerations (review the npm package and permissions before installing).
Credentials
The skill declares no required env vars or credentials. The text explicitly defers auth to Membrane and advises not to ask users for API keys. Requested privileges are proportional to integrating with SonarQube via a third-party service.
Persistence & Privilege
always:false and normal autonomous invocation flags; no install-time actions modify other skills or system-wide settings. Because this is instruction-only there is no persistent code installed by the skill itself.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sonarqube - 安装完成后，直接呼叫该 Skill 的名称或使用
/sonarqube触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Auto sync from membranedev/application-skills
v1.0.0
Auto sync from membranedev/application-skills
元数据
常见问题
Sonarqube 是什么？
SonarQube integration. Manage data, records, and automate workflows. Use when the user wants to interact with SonarQube data. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 121 次。
如何安装 Sonarqube？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sonarqube」即可一键安装，无需额外配置。
Sonarqube 是免费的吗？
是的，Sonarqube 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Sonarqube 支持哪些平台？
Sonarqube 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sonarqube？
由 Membrane Dev（@membranedev）开发并维护，当前版本 v1.0.1。
推荐 Skills