010107 code quality
Multi-domain agent skills collection for AI coding agents (Claude, Cursor, Copilot, OpenCode, and more). Covers programming, biology, cooking, and future domains. Installable via npx skills add.
npx -y skills add natuleadan/skills --skill 010107-code-qualityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Testing practices (vitest, TDD, coverage), security rules (secrets, XSS, injection, CORS), and seed data patterns (anonymization, multi-language).
The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.
SKILL.md
1.1 KB, as published. Nobody here has run it
Code Quality Standards
Overview
Cross-cutting quality standards for testing and security. For TypeScript language rules, see TypeScript Rules.
Quick Reference
Testing
- Use Vitest with
describe/it/expect - Integration tests with
@testing-library/react+userEvent - Follow AAA pattern: Arrange, Act, Assert
- 80% line coverage, 100% critical paths
- No
.only, no.skip, no testing implementation details
Security
- No hardcoded secrets — always use env vars
- Validate all input at boundaries (Zod schemas)
- Use parameterized queries to prevent SQL injection
- Prevent open redirects with URL validation
- Sanitize logs to strip secrets
- Never trust client-provided roles
References
- Testing
- Security
- Seed Data Patterns — Anonymization, multi-language, multi-currency seed data conventions