Automated code review, dependency auditing, tech debt tracking, and quality gates.
Devil's advocate code review — find edge cases, race conditions, failure modes
Structured code review — style, bugs, security, performance checks
Multi-language dependency scanner — license compliance, upgrade planner
Rule enforcement plugin — save rules with natural language, enforce with 17 lifecycle hooks
Pull request review — blast radius analysis, security scan, coverage delta
Security-first code review — OWASP Top 10, injection prevention, auth hardening
Audit skills for malicious code — injection, exfiltration, supply chain risks
Official SonarQube MCP server for code quality metrics, issues, and quality gate status
Test-driven development guidance — red-green-refactor workflow
Codebase debt scanner — prioritization, trend tracking, refactor planning
Evaluate and compare technology stacks — pros, cons, fit analysis