- .gitignore: ignore skills-lock.json and .skills.json produced by npx skills add
- SKILL.md: drop inline comments on allowed-tools (valid YAML cleanup)
- README: use 'npx skills add' without --skill (root SKILL.md is auto-discovered)
Rebased onto current main; the Dart/Flutter guide from #31 is preserved.
Give Flutter/Dart PRs a dedicated review guide, and document
`npx skills add` while keeping SKILL.md at the repo root so
clone-into-~/.claude/skills still works.
Co-authored-by: tt-a1i <tt-a1i@users.noreply.github.com>
Updated Ruby security guidelines for deserialization, error handling, and parameter handling. Improved clarity on using safe YAML loading, idempotency keys, and CSRF protection.
* feat: add Java 8 / Spring Boot 2 legacy review guide
Support reviewing long-lived Java 8 and Boot 2 (javax.*) codebases without
forcing Java 17/21 patterns. Closes#23.
Co-authored-by: Cursor <cursoragent@cursor.com>
* docs: rewrite Java 8 legacy guide in English
Make the guide accessible to international contributors; keep examples
and review checklists in English like other language guides (e.g. php.md).
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Co-authored-by: tt-a1i <tt-a1i@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Correctness fixes in the reference guides:
- django: len()/count() caching explanation was reversed; fix slicing/index
cache example; replace nonexistent __acall__ async middleware with the
documented markcoroutinefunction pattern; drop removed
SECURE_BROWSER_XSS_FILTER; REFERRER_POLICY -> SECURE_REFERRER_POLICY
- security: path-traversal guard compared a relative path to an absolute one
(rejected every valid file); compare absolute-vs-absolute
- nestjs: e2e ValidationPipe needs forbidNonWhitelisted/transform for the
"extra field -> 400" test to pass
- rust: select! cancel-safety example used read on both sides; bad case now
uses non-cancel-safe read_exact
- code-quality: "read less" example still read the whole file; use readline()
- svelte: drop nonexistent unstate() (use $state.snapshot); fix devalue/Date
note; comma-operator each-key -> template literal
- c/cpp/qt: restore mangled markers that rendered as a literal ?
- csharp: drop fabricated perf numbers
- java: scope HashMap infinite-loop note to Java 7 and earlier
- kotlin: closeableScope -> built-in viewModelScope
- css: deprecated darken()/clip:rect() -> color.adjust/clip-path
- typescript: legacy .eslintrc -> flat config (typescript-eslint v8)
Tooling and metadata:
- pr-analyzer.py: filename regex corrupted lib//web//db/ paths; parse the diff
header via backreference and add utf-8/error handling; add test
- SKILL.md: canonical name code-review-skill; document severity tiers; wire in
pr-analyzer.py
- README/CONTRIBUTING: fix stale skill name and line counts; complete the guide
tree; add a conventions section
* Add Swift code review guide
Add reference/swift.md covering modern Swift (5.9+/6): optionals and
safe unwrapping, value vs reference types, Swift Concurrency and data
race safety, SwiftUI property wrappers, and the API Design Guidelines.
Register the guide across the docs: language tables and file trees in
README.md (EN and zh), the SKILL.md description and guide table, the
common bugs checklist, and both landing pages. Bump the language count
from 19+ to 20+.
* fix: refine Swift guide examples
---------
Co-authored-by: Tu Shaokun <2801884530@qq.com>
* Add PHP review guide
* Translate PHP guide to English and correct line-count stats
Rewrite reference/php.md in English to match the FastAPI guide's
convention, since most users read English. Also fix the line-count
badge/blurb from 17,000+ to 16,000+ to match the actual total (~16.9k).
Adds index.html (zh_CN) and index.en.html (en_US) — a man(1)-style
landing page rendered in IBM Plex Mono on a warm amber-on-dark palette,
with ASCII title, vim-like status bar, and j/k/g/G/q keyboard nav.
Includes .nojekyll so GitHub Pages serves the HTML as-is.
- code-quality-universal.md: drop broken TS lookup-table example whose
one-key {key:true} object always evaluated to `true`; promote the
bgMap variant to the single ✅ block
- code-quality-universal.md: rename `## Review Checklist` to
`## 通用质量审查清单` (and TOC anchor) for consistency with peer
reference files that close with a Chinese checklist heading
- performance-review-guide.md: move `## 低级别效率反模式` above
`## 参考资源` so the references section remains the file's terminal
section, matching every other reference file
- performance-review-guide.md: slim `## 低级别效率反模式` from heavy
❌/✅ examples to a checklist with two illustrative snippets, and
cross-link the resource-management overlap into
common-bugs-checklist.md#resource-management
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
- Add shields.io badges (license, Claude Code, lines, languages, PRs welcome)
- Add centered header with bilingual subtitle
- Restructure language support as HTML table with file references and line counts
- Add four-phase review process diagram
- Add severity labels table with color indicators
- Add collapsible language highlight sections
- Improve bilingual (EN/CN) content with consistent structure
- Add usage examples table and installation instructions for all platforms
- Create `reference/java.md` with guidelines for modern Java (Records, Switch, Text Blocks), Spring Boot 3 (DI, Configuration), JPA (Performance, N+1), and Concurrency (Virtual Threads).
- Update `SKILL.md` to register the Java guide for on-demand loading.
- Update `README.md` to include Java in supported languages and key topics.
Daniel Liu