An AI-powered tool for analyzing self-hosted SonarQube projects, retrieving issues, and providing automated code suggestions.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install sonarqube-analyzer
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install sonarqube-analyzer using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is SonarQube Analyzer?
The SonarQube Analyzer is a robust integration for Openclaw Skills designed to streamline code quality management. It connects directly to your self-hosted SonarQube instance to fetch issues, verify Quality Gates, and suggest specific refactoring steps based on industry-standard rules. By bridging the gap between static analysis and active development, this skill empowers developers to maintain high standards without manual overhead.
Using Openclaw Skills like this allows for seamless integration of security and style checks directly into your AI-driven development environment. It provides developers with immediate feedback on project health, helping to eliminate technical debt before it reaches production.
SonarQube Analyzer Use Cases
- Automated code review for specific Pull Requests to identify blockers and critical issues.
- Checking the Quality Gate status of a project before proceeding with deployment.
- Generating detailed issue reports in Markdown for team documentation and transparency.
- Applying automated fixes for common SonarQube rules like redundant fragments or incorrect operator usage.
- Streamlining CI/CD pipelines with integrated Openclaw Skills quality reporting.
How SonarQube Analyzer Works
- The skill connects to the self-hosted SonarQube instance using the provided host URL and authentication token.
- It retrieves issues filtered by project key, pull request ID, severity levels, or status codes.
- The engine analyzes specific code smells and vulnerabilities against predefined SonarQube rules (e.g., S3358 for nested ternaries).
- A comprehensive summary is generated, including actionable code suggestions and examples for the developer.
- If enabled, the skill can apply automated fixes for supported rules to instantly improve code health.
SonarQube Analyzer Setup
Ensure Node.js 18+ is installed. Set your environment variables and install the package to begin using Openclaw Skills for analysis:
export SONAR_HOST_URL=http://127.0.0.1:9000
export SONAR_TOKEN=your_token_here
# Run analysis for a specific project
node scripts/analyze.js --project=my-project --pr=5
SonarQube Analyzer Data Schema & Taxonomy
The skill organizes output data into structured JSON objects for easy consumption by agents or CI tools. The schema includes:
| Field | Description |
|---|---|
total |
The total count of issues identified in the project/PR. |
issues |
An array of issue objects including severity, file path, line number, and rule ID. |
suggestions |
Refactoring advice, code examples, and whether a fix is automatable. |
summary |
A breakdown of issues by severity (BLOCKER, CRITICAL, MAJOR, etc.). |
nextSteps |
A prioritized list of manual tasks required to resolve remaining issues. |
SonarQube Analyzer Advanced Features
- Multi-severity filtering to focus on BLOCKER and CRITICAL issues during high-pressure releases.
- Integration with GitHub Actions for automated quality reporting within Openclaw Skills workflows.
- Automated remediation for specific rules such as S6749 (Redundant fragments) and S6759 (Non-readonly props).
- Detailed next-step generation for complex refactoring tasks, such as cognitive complexity reduction (S3776).
- Support for custom SonarQube tokens and host URLs to manage multiple self-hosted environments.
SKILL.md
Loading
Related Openclaw Skills
Faster Whisper GPU
A high-performance, privacy-first tool for local speech-to-text transcription using NVIDIA GPU acceleration.
Ant Design Skill
A comprehensive front-end design skill for building professional React interfaces using Ant Design components, layouts, and v5 design tokens.
Passo - Remote Browser Access
Passo enables secure remote browser access on your server to handle manual logins, 2FA, and captchas within Openclaw Skills environments.
gcloud
A professional automation skill that enables AI agents to manage Google Cloud Platform resources safely using the official gcloud CLI.
Stripe CLI
A secure interface for managing Stripe CLI operations, webhook forwarding, and sandbox testing within Openclaw Skills.
Antfarm CLI Skill
A comprehensive command-line interface for orchestrating, executing, and monitoring autonomous AI agent workflows.
METADATA
Featured*
