claude-skills-czl
Health Uyari
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 5 GitHub stars
Code Gecti
- Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Gecti
- Permissions — No dangerous permissions requested
Bu listing icin henuz AI raporu yok.
Battle-tested Claude Code configs — opinionated CLAUDE.md baselines, skills, slash commands and enforcement hooks you drop into any project
claude-skills-czl
Battle-tested Claude Code configurations — opinionated
CLAUDE.mdbaselines, skills, slash commands, and enforcement hooks you drop into any project so the AI follows your engineering standards by default.
Stop re-explaining your standards every session. Drop a config into your project's .claude/ folder and the agent already knows your rules for code style, security, testing, commits, and docs — and the hooks enforce the non-negotiable ones mechanically.
What's in here
Two ready-to-use configurations:
| Config | Use it when | Highlights |
|---|---|---|
configs/agnostic |
Any project, any language | A clean, language-agnostic baseline. Nothing assumes a stack; the hooks never fight a language's idioms. |
configs/langflow |
Working in the Langflow codebase | Everything in agnostic, plus Langflow-specific rules, a building-langflow-components skill, and a hook that enforces Langflow conventions. |
Both are self-contained — each is a complete .claude/ folder.
Repository layout
claude-skills-czl/
├── configs/
│ ├── agnostic/ # generic, language-agnostic config
│ │ ├── CLAUDE.md # the short, enforced baseline
│ │ ├── settings.json # registers the hooks + permissions
│ │ ├── commands/ # slash commands (/check, /done, /pr, …)
│ │ ├── hooks/ # PostToolUse / Stop / PreToolUse checks
│ │ ├── rules/ # optional per-stack rules (auto-applied by globs)
│ │ └── skills/ # the detailed "how" playbooks
│ └── langflow/ # same shape, specialized for Langflow
└── README.md
What a config contains
Every config is a drop-in .claude/ folder made of five parts:
CLAUDE.md— the single source of truth: a short, actionable baseline (code style, security, tests, commits, workflow). It's the what; it defers to the skills for the how.skills/— detailed, self-contained playbooks the agent reads before a matching task. Each has aSKILL.md,references/, and alearnings/folder for project-specific knowledge that accumulates over time.commands/— slash commands for the recurring workflow (start a session, run checks, review a diff, open a PR…).hooks/— Python/shell scripts wired viasettings.jsonthat run automatically and block on violations.rules/— optional per-stack rule files that auto-attach by fileglobs(e.g. only on**/*.py). CopyTEMPLATE.mdto add your own.
Skills
| Skill | What it covers |
|---|---|
developing-features |
Production code: security-first, SOLID, pragmatic principles, observability, file-structure limits |
developing-features-tdd |
Strict red-green-refactor TDD for new features |
fixing-bugs |
Reproduce-first bug fixing (failing test before the fix) |
writing-tests |
Testing pyramid, AAA, naming, coverage gate |
reviewing-code |
Severity-labeled PR review with an action checklist + correctness lenses (enum/state-machine completeness, control-flow exceptions, degrade-don't-crash) |
writing-pull-requests |
Conventional-commit PR titles, messages, descriptions |
documenting-features |
Living, DDD-aligned feature docs (ADRs, C4, Gherkin) |
ensuring-cross-platform |
Linux/macOS/Windows portability rules |
playwright-cli |
Browser automation & E2E testing with Playwright |
building-frontend-ui |
Framework-agnostic frontend UI — reuse & design tokens, components, accessibility, forms, state & data, responsive, performance, client security/PII (with per-framework references for React/Vue/Svelte/Web Components) |
building-langflow-components |
(Langflow only) Create and evolve Langflow components safely |
exploratory-testing |
Structured manual/exploratory testing — charters, time-boxed sessions, heuristics & oracles, solid bug reports |
writing-prd |
Product requirements — PRDs, one-pagers, PR-FAQs; problem-first, testable metrics, explicit non-goals |
api-design |
Contract-first, resource-oriented, backward-compatible, secure-by-default HTTP/REST APIs (with REST/GraphQL/gRPC guidance) |
threat-modeling |
Security design analysis — data-flow diagrams & trust boundaries, STRIDE, abuse cases, threats → controls → tests |
security-review |
Focused security audit of app code (frontend + backend) — OWASP Top 10 2025 + API Top 10 + privacy (LGPD/GDPR), with a safe, anti-regression remediation protocol |
running-agent-loops |
Drive multi-step / unattended agent loops safely — sequential pipelines, PR loops, RFC→DAG, the shared-notes context bridge, the de-sloppify pass |
debugging-agent-runs |
Recover a stuck/looping agent run — restate the goal, verify world state, shrink scope, run one discriminating check, then retry |
evaluating-ai-output |
Eval non-deterministic LLM/AI output — define expected behavior first, measure pass@k / pass^k, grade with code / model / human graders |
validating-in-reality |
Prove a bugfix/feature against the real running system — the user's cURL is the acceptance test (request before/after, DB state, E2E), real evidence over assumptions |
Commands
/init · /next · /check · /test · /review · /done · /commit · /push · /pr · /roadmap · /task · /sync · /security · /help · /learn · /verify · /dual-review · /evolve · /update-agnostic · /update-langflow
Hooks (what gets enforced)
| Hook | Event | Enforces |
|---|---|---|
check-comments.py |
on Write/Edit | No WHAT-comments; comment-density cap; doc-comments (///, //!) exempt |
check-file-size.py |
on Write/Edit | ≤ 500 LOC per file (≤ 700 with justification) |
check-banned-patterns.py |
on Write/Edit | shell=True, eval/exec on input, hardcoded paths, tokens in localStorage, bare except:, … |
check-doc-sync.py |
on Stop (turn end) | When you changed source: flags repo docs that may have drifted (so you don't have to ask), then suggests a Conventional-Commits message for the change — human commits, agent never runs git |
check-real-validation.py |
on user prompt | When your request contains a cURL or local endpoint, auto-instructs the agent to treat it as the acceptance test — validate against the running system (request + DB + E2E), no assumptions |
pre-push-smoke.sh |
before git push |
Fast lint/test smoke on changed areas (project-configurable skeleton) |
check-langflow-rules.py |
on Write/Edit | (Langflow only) SecretStrInput for API keys, no top-level SDK init in components, Alembic Phase: markers |
Quick start
The whole setup is: copy one config folder into your project, rename it to
.claude, and git-ignore it. That's it — Claude Code reads.claude/automatically.
1. Copy a config into your project as .claude/ (this both copies and renames):
# from the root of YOUR project — pick agnostic (any language) or langflow
cp -R /path/to/claude-skills-czl/configs/agnostic .claude
Use configs/langflow instead when working inside the Langflow codebase.
2. Git-ignore it so your project repo doesn't track it:
echo ".claude/" >> .gitignore
3. Done. Open the project in Claude Code — the CLAUDE.md baseline, skills, commands, and hooks are active. (Want the whole team to share these rules instead of keeping them local? Skip step 2 and commit .claude/.)
Keep it in sync (optional)
Prefer a symlink instead of a copy if you want updates to this repo to flow through automatically:
# from the root of YOUR project
ln -sfn /path/to/claude-skills-czl/configs/agnostic .claude
echo ".claude" >> .gitignore
Updating a copied install
If you copied the config (not symlinked), pull the latest from inside the project with a slash command:
/update-agnostic— refresh.claude/fromconfigs/agnostic./update-langflow— refresh.claude/fromconfigs/langflow.
They download the latest version, back up the current .claude/, and preserve your local additions (each skill's learnings/, settings.local.json, and any project-only rules/skills). A variant guard stops you from cross-updating — e.g. running /update-agnostic on a project that has the langflow config installed — unless you explicitly confirm the switch.
If you symlinked instead, you don't need these — just git pull in this repo.
Requirements
- Claude Code
python3(the enforcement hooks)jq(used by a couple of hooks)git(the doc-sync and pre-push hooks)
Customize
- Add per-stack rules: copy
rules/TEMPLATE.mdtorules/<stack>.md, set itsglobs, keep it short, and point to the skills for depth. - Teach the agent project specifics: drop a dated note in any skill's
learnings/folder. A learning overrides the skill's defaults — the agent reads it first. - Tune the hooks: they're small, dependency-free scripts; the thresholds live at the top of each file.
Contributing
Contributions welcome — see CONTRIBUTING.md. All content (code, comments, docs, skills) is in English. By participating you agree to the Code of Conduct.
Security
These configs are scripts and instructions that run on your machine — read settings.json and hooks/ before installing. To report a vulnerability, see SECURITY.md; don't open a public issue.
License
MIT © Cristhian Zanforlin
Yorumlar (0)
Yorum birakmak icin giris yap.
Yorum birakSonuc bulunamadi