Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)
Install
npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-dependency-risksnpx skills add SonarSource/sonarqube-agent-plugins --skill sonar-dependency-risks -a claude-code -gnpx skills add SonarSource/sonarqube-agent-plugins --skill sonar-dependency-risks -a codex -ggemini skills install https://github.com/SonarSource/sonarqube-agent-plugins.git --path skills/sonar-dependency-risksgh skill install SonarSource/sonarqube-agent-plugins sonar-dependency-risksgit clone --depth 1 https://github.com/SonarSource/sonarqube-agent-plugins /tmp/SonarSource__sonarqube-agent-plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/SonarSource__sonarqube-agent-plugins/skills/sonar-dependency-risks ~/.claude/skills/sonar-dependency-risks # Claude Code
cp -R /tmp/SonarSource__sonarqube-agent-plugins/skills/sonar-dependency-risks ~/.agents/skills/sonar-dependency-risks # Codex, Cursor, Gemini CLI, Copilot, OpenCode