Home / Skills / sonar-dependency-risks
sonar-dependency-risks From the maker
SonarSource/sonarqube-agent-pluginsSkill
Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)
Why this score
This repo hosts 10 skills, so its 112 stars are split between them (about 11 each) for scoring.
Popularity score: 49/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 21, 2026 at commit 32ca01408a48, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onesonar-dependency-risks SonarSource/sonarqube-agent-plugins · Skill | 49 | ★ 112 | ≈47 always | 16d ago |
| dependency-audit omergocmen/vibe-coder-kit · Skill Both about dependency | 48 | ★ 95 | ≈21 always | 5mo ago |
| audit-dependencies flutter/flutter-intellij · Skill Both about dependency | 73 | ★ 2.0k | ≈29 always | 19d ago |
| risk agentii-ai/agentii-investment-intelligence · Skill Both about risk | 56 | ★ 207 | ≈50 always | 1mo ago |
| catalyst-risk simonlin1212/Vibe-Research · Skill Both about risk | 78 | ★ 2.7k | ≈68 always | 17d ago |
| actuarial-risk-modeling magnus919/agent-skills · Skill Both about risk | 60 | ★ 137 | ≈26 always | 16d ago |