code_quality_scan
Scan local Python, JS/TS, Java, Go and PHP code for bugs, vulnerabilities, secrets, and code smells without SonarQube, returning issue counts, complexity, tech debt, and A–E ratings.
Instructions
本地 Bug 与代码质量扫描(无需 SonarQube):Python、JS/TS、React、Vue、Svelte、Java、Kotlin、Go、C#、PHP, 外加 Spring/.NET 配置里写死的密码和 MyBatis ${} 拼接;给出 Bug、漏洞、安全热点、异味、复杂度、重复、技术债和 A–E 评级。 use_linters:合并已装的 ruff、项目里的 ESLint(会加载项目的 ESLint 配置)、go vet。max_issues:简版列出的重要问题条数。detail:列出全部问题。
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"path": "<path>"
},
"name": "code_quality_scan"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | ||
| detail | No | ||
| max_issues | No | ||
| use_linters | No |