Coding Principles
Language-agnostic coding principles for maintainability, readability, and code quality
Test report
- Verdict
- Tested · Works
- Score
- Tested
- Jul 21, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · 2926836
⚠ The author changed this skill after we tested it. The verdict below describes the version we ran on Jul 21, 2026; it's queued for a re-test.
Fetched SKILL.md and its one referenced file (references/security-checks.md, HTTP 200) from the dev-skills copy; frontmatter has name+description and no hardcoded paths or security smells. For output I wrote the same registerUser function twice: a baseline written naturally, then one following the body strictly. The skill version concretely fixed real defects in my baseline — SQL string concatenation became a parameterized query, a console.log leaking the plaintext password became a username-only log, MD5 became pbkdf2 with salt, the magic number 13 became MINIMUM_AGE, and raw e.message stopped leaking to the caller. Trigger phrasings judged: "refactor this 300-line UserService" YES, "review my PR for code quality" YES, "implement a caching layer with clean maintainable structure" YES, "what's the difference between TCP and UDP" NO, "set up a GitHub Actions CI pipeline" NO — all 5 correct.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 5/5
- Triggers reliably 5/5
- Output vs. baseline 7/10
- Docs & honesty 5/5
What Coding Principles does
A language-agnostic checklist of coding principles covering function design, error handling, dependency injection, commenting, refactoring, and secure defaults, plus a security-checks reference for review. Triggers when implementing features, refactoring, or reviewing code quality. Steers generated code toward parameterized queries, secret-safe logging, secure hashing, named constants, and small single-responsibility functions.
How to install Coding Principles
git clone --depth 1 https://github.com/shinpr/claude-code-workflows.git /tmp/coding-principles-src
mkdir -p ~/.claude/skills
cp -R /tmp/coding-principles-src/dev-skills/skills/coding-principles ~/.claude/skills/coding-principles
# Places SKILL.md at ~/.claude/skills/coding-principles/SKILL.md plus references/security-checks.md
# No deps, no scripts, no API keys — pure guidance skill.
# Identical copies also live under dev-workflows-frontend/ and dev-workflows-fullstack/ in the same repo.
# Plugin alternative: /plugin marketplace add shinpr/claude-code-workflows then /plugin install dev-workflows@claude-code-workflows
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Coding Principles
-
/coding-principlesLanguage-agnostic coding principles for maintainability, readability, and code quality
It also activates on plain-language prompts like these:
-
Review this function for maintainability issues -
Refactor this code to be more readable -
Check this feature implementation against coding principles
Frequently asked questions
- Is the Coding Principles skill free?
- Yes. The skill itself is free from shinpr/claude-code-workflows. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Coding Principles work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 21, 2026. Verdict: Tested · Works. Fetched SKILL.md and its one referenced file (references/security-checks.md, HTTP 200) from the dev-skills copy; frontmatter has name+description and no hardcoded paths or security smells. For output I wrote the same registerUser function twice: a baseline written naturally, then one following the body strictly. The skill version concretely fixed real defects in my baseline — SQL string concatenation became a parameterized query, a console.log leaking the plaintext password became a username-only log, MD5 became pbkdf2 with salt, the magic number 13 became MINIMUM_AGE, and raw e.message stopped leaking to the caller. Trigger phrasings judged: "refactor this 300-line UserService" YES, "review my PR for code quality" YES, "implement a caching layer with clean maintainable structure" YES, "what's the difference between TCP and UDP" NO, "set up a GitHub Actions CI pipeline" NO — all 5 correct.
- What is the Coding Principles SkillProof Score?
- 8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 5/5.
- How do I install Coding Principles?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Coding Principles with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.