claude-dev-standards
Universal Development Standards (v2.3.0) — A Claude Code skill that enforces production-grade engineering practices across the full SDLC.
Open source Repository Open in the app JSON README (API)
About
Universal Development Standards (v2.3.0) — A Claude Code skill that enforces production-grade engineering practices across the full SDLC.
Details
- Kind
- Plugins
- Topic
- No topic detected
- Publisher
- nsyamala1
- Origin
- marketplace
- Category
- ferramentas
- Last push
- 2026-04-12T16:03:27Z
- Repository state
- ativo
- License
- MIT
- Added
- 2026-08-30 01:48:58
- Updated
- 2026-08-30 01:48:58
- Origin id
nsyamala1/claude-dev-standards/claude-dev-standards
README
# dev-standards — Claude Code Skill > **Universal Development Standards (v2.3.0)** — A Claude Code skill that enforces > production-grade engineering practices across the full SDLC. ## What it does When invoked, this skill instructs Claude to apply a comprehensive set of development standards to everything it generates or reviews in that session — covering code quality, security, performance, API design, testing, DevOps, and more. **Stacks covered:** | Layer | Technologies | |-------|-------------| | Frontend | React, Next.js, React Native, Vue 3, Svelte | | Backend | Python/FastAPI, Node.js/Express, Go/Fiber | | Database | PostgreSQL, SQLite | | Infra | GitHub Actions, Docker, Supabase | ## Standards covered | # | Section | |---|---------| | 1 | Product & Project Management (GitHub Flow, Agile, Monorepo, Code Review) | | 2 | Design & User Experience (WCAG 2.1 AA, mobile-first, dark mode) | | 3 | Engineering Excellence (frontend, backend, API design, error handling) | | 4 | Quality Assurance & Testing (unit, integration, E2E, manual QA) | | 5 | DevOps & Automation (CI/CD, deployments, smoke tests) | | 6 | Security, Safety & Governance (OWASP, vulnerability scanning, GDPR, AI governance) | | 7 | Operations & Observability (structured logging, alerting) | | 8 | Efficiency Standards (AI resource use, velocity) | | 9 | Performance Standards (Core Web Vitals, load testing, slow query thresholds) | | 10 | Documentation & Artifacts (architecture.md, RFC templates, test plans) | ## Installation ### Option 1 — Clone directly into your Claude skills directory ```bash git clone https://github.com/YOUR_USERNAME/claude-dev-standards \ ~/.claude/skills/dev-standards ``` ### Option 2 — Manual install 1. Download `SKILL.md` from this repo. 2. Place it at: ``` ~/.claude/skills/dev-standards/SKILL.md ``` 3. Restart Claude Code (or reload the window). ## Usage In any Claude Code session, type: ``` /dev-standards ``` Claude will immediately apply all standards to the current session. You can also pass a specific question or request: ``` /dev-standards review this PR for security issues /dev-standards what API design patterns should I use here? ``` ## Example use cases ### Start a new feature with standards enforced ``` /dev-standards build a user authentication API with JWT refresh tokens ``` Claude will apply REST conventions, Pydantic/Zod schemas, Controller->Service->Repository pattern, rate limiting, HSTS headers, and structured logging — all without you asking for each individually. --- ### Review existing code for security issues ``` /dev-standards review this file for OWASP vulnerabilities ``` Claude will check for injection risks, broken auth, XSS, missing CORS/CSP headers, hardcoded secrets, and unvalidated inputs — and suggest fixes inline. --- ### Set up CI/CD pipeline ``` /dev-standards create a GitHub Actions workflow for my Next.js app ``` Claude will generate a workflow with lint, typecheck, unit tests, Lighthouse CI, vulnerability scanning (npm audit), secret detection (gitleaks), and staging deploy — all gated correctly. --- ### Design a database schema ``` /dev-standards design a schema for a multi-tenant SaaS app ``` Claude will produce versioned migrations (not raw SQL), add HNSW indexes where relevant, flag any queries that need `EXPLAIN ANALYZE`, and include soft-delete with GDPR erasure support. --- ### Write tests for a service ``` /dev-standards write tests for this payment service ``` Claude will generate a full test pyramid: unit tests (mocked externals, 80%+ coverage), integration tests against a real test DB, and E2E tests for the checkout flow using Playwright — with a regression test for any known edge cases. --- ### Audit a PR before merge ``` /dev-standards apply the code review checklist to this diff ``` Claude will run through the full review checklist: logic correctness, no PII in logs, no N+1 queries, error paths handled, test coverage, API backwards-compatibility, and secrets/credential scan. --- ### Plan an RFC for a complex feature ``` /dev-standards write an RFC for migrating from REST to GraphQL ``` Claude will produce a structured RFC with problem statement, trade-off analysis, schema changes, API contract, security implications, and open questions — ready for team review before any code is written. --- ## Adoption tiers Not every rule applies to every project. The skill documents two tiers: | Tier | Sections | Best for | |------|----------|----------| | **Starter** | 1, 3 (core), 5 (CI basics), 6 | Solo devs, side projects | | **Full** | All 10 sections | Teams, production systems | ## Changelog | Version | Date | Summary | |---------|------|---------| | 2.3.0 | 2026-04-12 | Code review standards, API design, error handling & resilience, data privacy/GDPR, performance budgets | | 2.2.0 | 2026-04-12 | Vulnerability scanning (SAST, dependency scan, secret detection, IaC) | | 2.1.0 | 2026-04-09 | Vue/Svelte/Go support, monorepo guidance, MIT license, tiered adoption, RFC + architecture templates | | 2.0.0 | 2025-01-01 | Initial public release | ## Contributing PRs welcome. Please: - Open an issue first for significant changes. - Follow the section structure in `SKILL.md`. - Update the `version` and `changelog` in the frontmatter. - Keep rules actionable and tool-specific — avoid vague advice. ## License MIT — see [LICENSE](./LICENSE).