Coding Principles

Language-agnostic coding principles for maintainability, readability, and code quality

Tested · Works

Test report

Verdict
Tested · Works
Score
8.8/10
Tested
Jul 21, 2026
Environment
Claude Code 2.x (agent harness)
Upstream re-checked
Aug 10, 2026 · 2926836

⚠ The author changed this skill after we tested it. The verdict below describes the version we ran on Jul 21, 2026; it's queued for a re-test.

Fetched SKILL.md and its one referenced file (references/security-checks.md, HTTP 200) from the dev-skills copy; frontmatter has name+description and no hardcoded paths or security smells. For output I wrote the same registerUser function twice: a baseline written naturally, then one following the body strictly. The skill version concretely fixed real defects in my baseline — SQL string concatenation became a parameterized query, a console.log leaking the plaintext password became a username-only log, MD5 became pbkdf2 with salt, the magic number 13 became MINIMUM_AGE, and raw e.message stopped leaking to the caller. Trigger phrasings judged: "refactor this 300-line UserService" YES, "review my PR for code quality" YES, "implement a caching layer with clean maintainable structure" YES, "what's the difference between TCP and UDP" NO, "set up a GitHub Actions CI pipeline" NO — all 5 correct.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

  • Installs cleanly 5/5
  • Triggers reliably 5/5
  • Output vs. baseline 7/10
  • Docs & honesty 5/5

What Coding Principles does

A language-agnostic checklist of coding principles covering function design, error handling, dependency injection, commenting, refactoring, and secure defaults, plus a security-checks reference for review. Triggers when implementing features, refactoring, or reviewing code quality. Steers generated code toward parameterized queries, secret-safe logging, secure hashing, named constants, and small single-responsibility functions.

How to install Coding Principles

git clone --depth 1 https://github.com/shinpr/claude-code-workflows.git /tmp/coding-principles-src
mkdir -p ~/.claude/skills
cp -R /tmp/coding-principles-src/dev-skills/skills/coding-principles ~/.claude/skills/coding-principles
# Places SKILL.md at ~/.claude/skills/coding-principles/SKILL.md plus references/security-checks.md
# No deps, no scripts, no API keys — pure guidance skill.
# Identical copies also live under dev-workflows-frontend/ and dev-workflows-fullstack/ in the same repo.
# Plugin alternative: /plugin marketplace add shinpr/claude-code-workflows then /plugin install dev-workflows@claude-code-workflows

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Coding Principles

  • /coding-principles Language-agnostic coding principles for maintainability, readability, and code quality

It also activates on plain-language prompts like these:

  • Review this function for maintainability issues
  • Refactor this code to be more readable
  • Check this feature implementation against coding principles

Frequently asked questions

Is the Coding Principles skill free?
Yes. The skill itself is free from shinpr/claude-code-workflows. SkillProof publishes the install command and an independent test verdict at no cost.
Does Coding Principles work with Claude Code?
We tested it with Claude Code 2.x (agent harness) on Jul 21, 2026. Verdict: Tested · Works. Fetched SKILL.md and its one referenced file (references/security-checks.md, HTTP 200) from the dev-skills copy; frontmatter has name+description and no hardcoded paths or security smells. For output I wrote the same registerUser function twice: a baseline written naturally, then one following the body strictly. The skill version concretely fixed real defects in my baseline — SQL string concatenation became a parameterized query, a console.log leaking the plaintext password became a username-only log, MD5 became pbkdf2 with salt, the magic number 13 became MINIMUM_AGE, and raw e.message stopped leaking to the caller. Trigger phrasings judged: "refactor this 300-line UserService" YES, "review my PR for code quality" YES, "implement a caching layer with clean maintainable structure" YES, "what's the difference between TCP and UDP" NO, "set up a GitHub Actions CI pipeline" NO — all 5 correct.
What is the Coding Principles SkillProof Score?
8.8/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 5/5.
How do I install Coding Principles?
Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Coding Principles with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.