Introducing Codacy Skills (Part 4): Scan and fix your code before you push

Codacy Skills teach coding agents like Claude Code to run Codacy from the terminal where the code is written: working findings, tuning rules, wiring up test coverage.

This is the final post in the series, and it covers the two skills that move the analysis loop itself onto your machine, at the two moments it pays off most. The Analysis CLI Skill scans and fixes your code before you commit, so your pull requests open without the issues Codacy would have flagged. The Code Review Skill works an open PR locally, so a red check gets cleared with a single push instead of a push per round trip. The first half of this post needs no Codacy account.

Scan and fix before you commit

You have finished a change. Before it goes anywhere, hand it to your agent:

"Scan my changes with Codacy and fix what it finds before I commit."

The agent runs Codacy's static analysis on your machine, reads the results, and makes the fixes, covering quality issues and security findings alike, on the code as it sits in your working tree. The findings that would have shown up on your pull request an hour later get fixed before the pull request exists. Your PRs open with zero new issues from the tools you run locally.

Under the hood, the skill runs the Codacy Analysis CLI, which detects the languages in your repo and picks the matching tools: Trivy, Opengrep, Checkov, ESLint and more. Analysis runs on the whole repo, or scoped to whatever slice you ask for: specific files, your staged changes, your branch, an open pull request. If your team is already on Codacy, the CLI can sync the repo's ruleset, so the local scan checks against the same standards that your merge gate enforces. And everything the skill does, you can also run yourself directly from the Analysis CLI, with no agent involved.

The install has no login step:

Next, install the plugin:

The skills work with Claude Code, OpenAI Codex, GitHub Copilot, and others through the Agent Skills standard. You can do all of this right now, without creating a Codacy account.

Work a red PR locally, push once

Your pull request came back red. Instead of reading findings in the open PR or on codacy.com and fixing them one push at a time, you ask:

"Review pull request 42 with Codacy."

Back comes one structured review: the quality gate status, new issues combined from the local scan and Codacy's cloud analysis, with critical and high flagged as blockers, the coverage delta and the new code your tests miss, whether the change matches the ticket and the PR description, and proposed test scenarios. One summary where that used to be a walk across tabs.

From there, the agent fixes the real findings on your machine and can dismiss the false positives with a logged reason, and everything travels together. One push, then the gate re-runs. Where Part 1 had the cloud re-run the analysis after each fix, this loop runs on your machine.

Coverage criteria still need your CI to run the tests and upload the report (read Part 3 on setting up coverage reporting), so the local loop covers the analysis side of the gate. And this half needs a Codacy account.

If you followed Parts 1 to 3, you already have everything: the Code Review Skill uses the Analysis CLI together with the Cloud CLI, and one login covers both. If not, two commands close the gap:

What the four skills add up to

Part 1 gave your agent Codacy's findings and the controls to unblock a pull request from the terminal.

Part 2 auto-tuned your rules to cut false positives at the source.

Part 3 set up coverage reporting and merge gates.

Part 4 (this post) moves the loop onto your machine: issues get fixed where the code is written, and the cloud check becomes a confirmation rather than the place you discover problems. Together the four skills cover a change's whole path, from first edit to merged pull request, in the surface where the code is now written.

Try it for yourself

Install Codacy Skills and put your agent to work. If you don't have a Codacy account, start with the Codacy Analysis CLI and sign up when you want the full PR review, quality gates and coverage included.