AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Codacy

skill-d-oit-rust-2026-template-codacy · by d-oit

Use Codacy static analysis CLIs to query PR analysis, triage issues, suppress false positives, and run local analysis. Use when Codacy blocks a PR, when asked to fix Codacy issues, suppress false positives, query PR quality data, or integrate Codacy into CI/CD workflows. Also use when the user mentions "Codacy", "static analysis check", "code quality gate", or "Codacy is failing".

↗ Website ↗ Repository
— No reviews yet
0 installs
0 views
— view→install

Install

$ agentstack add skill-d-oit-rust-2026-template-codacy

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-d-oit-rust-2026-template-codacy)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 2d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Codacy? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Codacy Static Analysis

When to Use

  • User asks for this skill's functionality

Orchestrate static analysis using Codacy Analysis CLI (local) and Codacy Cloud CLI (remote).

Installation & Auth

# Analysis CLI (for local runs)
npm i -g @codacy/analysis-cli

# Cloud CLI (for PR data and suppressions)
npm i -g @codacy/codacy-cloud-cli

export CODACY_API_TOKEN=

PR Triage Workflow

  1. Get PR analysis:

codacy pull-request gh --output json > /tmp/codacy-pr.json

  1. Categorize issues:
  • False positives → Suppress via Cloud CLI.
  • Real issues → Fix in code.
  1. Suppress false positives:

codacy pull-request gh --ignore-issue --ignore-reason FalsePositive Note: Use numeric resultDataId, NOT hash IDs.

  1. Fix issues: Batch fix patterns and verify with local lint/tests.

Local Analysis

# Initialize configuration (generates .codacy.yml)
codacy-analysis init --default

# Run local analysis
codacy-analysis analyze --pr --output-format json

Known Limitations

| Tool Category | Status | Note | |---------------|--------|------| | JS/TS/Shell | ✅ Works | ESLint9, Stylelint, ShellCheck | | Rust | ⚠️ Limited | Local analysis uses jscpd and Lizard; Cloud uses Opengrep | | Python/Ruby | ❌ Fails | Missing runtimes/venv issues | | Java/PMD | ❌ Fails | Missing Java runtime |

Always cross-reference with Cloud CLI for full PR data.

Rationalizations

| Rationalization | Reality | |-----------------|---------| | "Local analysis shows 0 issues, so we are good." | Analysis CLI has limited local tool support; Cloud CLI is the source of truth. | | "I'll use the issue hash for suppression." | Codacy CLI requires the numeric resultDataId for suppressions. |

Red Flags

  • [ ] Relying solely on local codacy-analysis for Rust/Python/Java projects.
  • [ ] Attempting to suppress issues without a valid --ignore-reason.
  • [ ] Ignoring the resultDataId field in JSON output in favor of hashes.

References

  • references/config-format.md - .codacy.yml schema and advanced options
  • references/output-format.md - JSON schema for PR analysis
  • references/supported-tools.md - Local vs Cloud tool availability

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Developer Tools