Universal dev standards for code reviews, git workflows, and productivity. Engineers and teams use it to enforce best practices, improve code quality, and streamline workflows. Integrates with git, CI/CD pipelines, and IDEs.
git clone https://github.com/AsiaOstrich/universal-dev-skills.gitUniversal dev standards for code reviews, git workflows, and productivity. Engineers and teams use it to enforce best practices, improve code quality, and streamline workflows. Integrates with git, CI/CD pipelines, and IDEs.
[{"step":"Prepare the context","action":"Copy the diff of your changes (e.g., from `git diff` or GitHub PR) and paste it into the prompt. Specify the project name, branch, and programming language if applicable.","tip":"For large PRs, focus on the most critical files first. Use `git diff --name-only` to identify changed files."},{"step":"Customize the review criteria","action":"Replace [PROGRAMMING_LANGUAGE] with the relevant language (e.g., Python, JavaScript) and [PROGRAMMING_LANGUAGE] best practices with specific guidelines (e.g., 'PEP 8 for Python' or 'Airbnb JavaScript Style Guide').","tip":"If your team has a custom style guide or security checklist, include it in the prompt to ensure consistency."},{"step":"Review the AI's output","action":"Copy the AI's review into your PR or code review tool. Manually verify critical issues before addressing them.","tip":"Use the AI's line-by-line comments as a starting point, but always double-check for false positives or context-specific nuances."},{"step":"Iterate and refine","action":"Address the AI's feedback, then regenerate the review for the updated changes. Use the AI's suggestions to improve test coverage, performance, or security.","tip":"For complex issues, break them into smaller, testable changes and review them incrementally."},{"step":"Integrate into your workflow","action":"Set up a CI/CD pipeline to run the AI review as a pre-merge check (e.g., using GitHub Actions or GitLab CI). Configure it to fail the build if critical issues are detected.","tip":"Start with a non-blocking review (e.g., only flag issues) before enforcing it as a blocking check."}]
No install command available. Check the GitHub repository for manual installation instructions.
git clone https://github.com/AsiaOstrich/universal-dev-skillsCopy the install command above and run it in your terminal.
Launch Claude Code, Cursor, or your preferred AI coding agent.
Use the prompt template or examples below to test the skill.
Adapt the skill to your specific use case and workflow.
Act as a senior software engineer performing a code review for [PROJECT_NAME]. Review the following changes in [BRANCH_NAME]: [CODE_CHANGES]. Check for: 1) adherence to [PROGRAMMING_LANGUAGE] best practices, 2) potential bugs or edge cases, 3) performance implications, 4) security vulnerabilities, 5) test coverage gaps. Provide feedback in GitHub/GitLab review format with clear line-by-line comments and a summary section. Include suggestions for improvements and next steps for the author.
{"review":{"summary":"Overall, the changes in `feature/user-authentication` improve the authentication flow but introduce several critical issues that need addressing before merging. The implementation of JWT refresh tokens is a good step, but the lack of input validation and missing test cases for edge scenarios significantly increases risk. The PR also includes some minor style inconsistencies that should be cleaned up. I recommend addressing the critical issues first, then we can discuss the rest in a follow-up review.","line_comments":[{"line":42,"comment":"⚠️ SECURITY: The `generateToken` function doesn't validate the `userId` input. An attacker could pass a malformed ID to crash the service or inject malicious data. Add validation: `if (!isValidUUID(userId)) throw new Error('Invalid user ID')`.","severity":"critical"},{"line":67,"comment":"🔍 PERFORMANCE: The `refreshToken` endpoint queries the database twice in sequence. This could cause latency spikes under load. Consider batching these queries or using a single optimized query.","severity":"major"},{"line":89,"comment":"🧪 TESTING: No test cases for expired refresh tokens. Add a test in `auth.test.js` to verify the system handles expired tokens gracefully by returning a 401 response.","severity":"minor"},{"line":112,"comment":"📝 STYLE: Inconsistent spacing around operators. Follow the project's style guide (e.g., `token = generateToken(userId)` instead of `token=generateToken(userId)`).","severity":"trivial"}],"suggestions":["Implement input validation for all user-provided data in the auth flow.","Add unit tests for edge cases (e.g., invalid tokens, malformed payloads).","Optimize the refresh token query to reduce database round trips.","Run a security scan with `npm audit` and address any new vulnerabilities.","Fix style inconsistencies using `eslint --fix` before merging."],"next_steps":["Address critical and major issues in a new commit.","Rebase the branch to resolve conflicts with `main`.","Update the PR description with details of the changes made.","Request a re-review once the critical issues are resolved."]}}Automated receipt scanning for expense management
Let’s build from here, together
IronCalc is a spreadsheet engine and ecosystem
Customer feedback management made simple
Enterprise workflow automation and service management platform
Automate your spreadsheet tasks with AI power
Take a free 3-minute scan and get personalized AI skill recommendations.
Take free scan