Help us improve
Share bugs, ideas, or general feedback.
From sonarqube
Fixes SonarQube code quality or security issues in code using rule key and file location. Looks up rule details, reads file context, applies minimal changes, explains fix.
npx claudepluginhub sonarsource/sonarqube-agent-plugins --plugin sonarqubeHow this skill is triggered — by the user, by Claude, or both
Slash command
/sonarqube:sonar-fix-issue [rule-key] [file-path:line][rule-key] [file-path:line]This skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Fix a code quality or security issue identified by SonarQube.
Analyzes single code files for quality and security issues using SonarQube MCP Server. Supports Python, JS/TS, Java, Go, PHP, C#, Ruby, Swift, Kotlin, C/C++. Detects language and scope from path.
Integrates SonarQube/SonarCloud via MCP server for quality gate checks, issue discovery/triaging, pre-push code analysis, and rule explanations in agent workflows. Use for gate status, finding issues, snippet analysis before commits, or rule details.
Share bugs, ideas, or general feedback.
Fix a code quality or security issue identified by SonarQube.
sonar-fix-issue java:S1481 src/main/java/MyClass.java:42
sonar-fix-issue python:S2077 src/auth/login.py
sonar-fix-issue Remove unused variable in MyClass.java
Parse the user-provided arguments for:
java:S1481, python:S2077)src/auth/login.py:34)If neither a rule key nor a file path can be determined, ask: "Which rule and file should I fix?"
Call mcp__sonarqube__show_rule with the rule key to retrieve the full rule description,
rationale, and remediation guidance before touching any code. Do not add extra parameters (such as projectKey) unless the tool schema requires them — after integration, rule lookup usually needs only the rule key.
If the MCP server is unavailable, rely on built-in knowledge of SonarQube rules.
Read the full file content. If a line number was given, focus analysis around that line but read the whole file to understand context.
After editing, briefly explain:
<file> to confirm no new issues were introduced."sonar.projectKey in sonar-project.properties) — the CLI always uses -p."