Triage SonarQube SCA dependency risks by CVE reachability, prepare safe UI writeups, and optionally bundle confirmed package fixes.
Install
npx skills add SonarSource/sonarqube-agent-plugins --skill sonar-triage-dependency-risksnpx skills add SonarSource/sonarqube-agent-plugins --skill sonar-triage-dependency-risks -a claude-code -gnpx skills add SonarSource/sonarqube-agent-plugins --skill sonar-triage-dependency-risks -a codex -ggemini skills install https://github.com/SonarSource/sonarqube-agent-plugins.git --path skills/sonar-triage-dependency-risksgh skill install SonarSource/sonarqube-agent-plugins sonar-triage-dependency-risksgit clone --depth 1 https://github.com/SonarSource/sonarqube-agent-plugins /tmp/SonarSource__sonarqube-agent-plugins
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/SonarSource__sonarqube-agent-plugins/skills/sonar-triage-dependency-risks ~/.claude/skills/sonar-triage-dependency-risks # Claude Code
cp -R /tmp/SonarSource__sonarqube-agent-plugins/skills/sonar-triage-dependency-risks ~/.agents/skills/sonar-triage-dependency-risks # Codex, Cursor, Gemini CLI, Copilot, OpenCode