Sonar

Pack

Pack Skill Sonar : commande /sonar + skills de garde (preflight/runtime, safety-guard, gateguard, security-scan).

Cette collection Arboris assemble skills et commandes autour d’un même thème. Installe le pack via la CLI ou un ZIP, puis ouvre ton agent pour enchaîner les tâches couvertes. Les éléments listés ci-dessous restent accessibles individuellement dans le catalogue si tu préfères une install à la carte. Objectif : gagner du temps et garder une base commune de prompts de qualité. Chaque skill et chaque commande peut aussi être copié seul, scanné côté sécu, et mis à jour quand le catalogue évolue. Idéal pour standardiser un workflow d’équipe sans imposer un monorepo de prompts.

5 éléments

Commandes · sonar

/sonarActive Skill Sonar (preflight ou runtime) et s’appuie sur les skills de garde associés.

Skills · sonar

GateguardPreToolUse fact-forcing gate that denies the first Edit/Write/Bash (including MultiEdit and NotebookEdit) attempt until the agent presents concrete facts (importers, data schemas, verbatim user instruction), then allows retry; A/B-tested at +2.25 quality points. Use when enabling or configuring the GateGuard hook, exempting paths via env vars, or handling first-touch denials.Safety GuardGuard against destructive operations with three modes: Careful intercepts dangerous commands (rm -rf, git push --force, DROP TABLE) for confirmation, Freeze locks writes to one directory, and Guard combines both via PreToolUse hooks. Use when working on production systems, running agents autonomously, restricting edits to a directory, or during migrations, deploys, and data changes.Security ScanScan your Claude Code configuration (.claude/ directory) for security vulnerabilities, misconfigurations, and injection risks using AgentShield. Checks CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions. Use when auditing a .claude/ directory — CLAUDE.md, settings.json, MCP servers, hooks, or agent definitions.Skill SonarLifecycle security guard for AI agent skills. Routes to a preflight audit (vetting, installing, reviewing a skill package) or a runtime guard (tool calls, outputs, side effects while a skill is active). Use when enabling, auditing, or safety-checking skills, or when you want guarded execution of an already-installed skill. Advisory only — the user decides.