dev

Plugin dev from marketplace gerald-dev-best-practices in gerfru/dev-best-practices. Commands read from the repo's manifest — 1 month ago.

Skills (29)

• dev-design-api

  API contract design skill grounded in CMU 17-625 (API Design, Swarnalatha Ashok / Bradley Schmerl) and Google API Design Guide. Use this skill whenever the user wants to design, review, or evolve an API. Triggers: "design an API for X", "review my REST API", "should I use REST or GraphQL or gRPC", "

• dev-design-app

  From an app idea to well-founded architecture and stack decisions based on the Dev-Best-Practices rules. Use this skill whenever the user describes a new app idea and wants help choosing architecture, stack, structure, or a scaffolding plan; triggers on "new app", "app idea", "how do I structure", "

• dev-design-cicd

  CI/CD Pipeline Design grounded in "Accelerate" (Forsgren/Humble/Kim, IT Revolution 2018) and "Continuous Delivery" (Humble/Farley, Addison-Wesley 2010). Covers pipeline architecture, deployment strategies (Blue-Green, Canary, Feature Flags), environment design, DORA metrics, and Trunk-Based Developm

• dev-design-data

  Data model design skill grounded in CMU 15-445 (Database Systems, Prof. Andy Pavlo) and Stanford CS245. Use this skill whenever the user needs to design or review a database schema, choose between SQL and NoSQL, decide on normalization level, plan indexing strategy, or make Event Sourcing / CQRS dec

• dev-design-iac

  Infrastructure as Code Design grounded in "Infrastructure as Code" (Kief Morris, O'Reilly 2021) and NTNU IIKG3005 (the only dedicated academic IaC course worldwide). Covers IaC principles (Immutable Infrastructure, Idempotency, Single Source of Truth), module design, state management, drift detectio

• dev-design-llm

  LLM system design grounded in Stanford CS224N (Yang/Choi), CMU 11-667 (Savelka/Kim) and Chip Huyen "Designing ML Systems". Use this skill whenever the user needs to design an LLM-powered feature or system from scratch. Triggers: "RAG architecture", "should I fine-tune", "how do I build an agent", "p

• dev-design-migration

  Migration planning skill grounded in MIT 6.5840 (Distributed Systems, Morris/ Kaashoek/Zeldovich) and Martin Fowler's migration patterns. Use this skill whenever the user needs to plan a migration: Monolith→Microservices, v1→v2 API, database schema migration, zero-downtime deployment, technology sta

• dev-design-observability

  Observability architecture grounded in the Google SRE Books (Beyer et al.) and Observability Engineering (Majors/Fong-Jones, O'Reilly 2022). Covers SLO/SLI/Error Budget, Golden Signals, metrics design, distributed tracing (OpenTelemetry), structured logging, SLO-based alerting (burn rate), and incid

• dev-design-public

  Publication-readiness design skill grounded in OpenSSF Best Practices, GitHub Security Hardening docs, CISA Security-by-Design, OWASP DevSecOps Guideline, and SLSA v1.0. Use this skill whenever the user wants to plan making a private repository public, open-source a project, or prepare a codebase fo

• dev-design-secure

  Security-first application design skill grounded in TU Graz ISEC Major curriculum and top-university references (Stanford CS255/CS355, MIT 6.566/6.5610). Use this skill whenever the user wants to design, architect, or plan a new application and security matters. Trigger for: "help me design a secure

• dev-design-ux-artifacts

  Structural, artifact-driven UX/UI design workflow grounded in Jesse James Garrett's "The Elements of User Experience" (5-plane model: Strategy, Scope, Structure, Skeleton, Surface) and Rosenfeld/Morville/Arango's "Information Architecture for the Web and Beyond". Produces a traceable chain of interm

• dev-design-ux

  Human-Centered UX Design skill grounded in the leading academic HCI curricula (CMU HCII, Stanford CS 247A/347, ETH, TU Wien, TU Graz) and the four canonical industry frameworks: Microsoft HAX 18 Guidelines (Amershi et al., CHI 2019), Google PAIR Guidebook (23 Patterns), CHI 2024 Generative AI Design

• dev-meta-create-skill

  Creates a new skill for this plugin following the established methodology: topic → academic research (university curricula + canonical books) → SKILL.md + references/. Use this skill when you want to create a new /dev skill. Trigger: "create a new skill", "build a new skill", "create skill for X", "

• dev-meta-drift

  Compares the dev-best-practices block in a project CLAUDE.md with the current state of the rule files and shows what is missing, outdated, or newly added. Use this skill whenever the user wants to update their project rules, check if rules are still current, or sync a CLAUDE.md with the latest best

• dev-meta-help

  Navigation menu for all Dev Best Practices skills. Shows all available skills grouped and starts the chosen one directly. Trigger for "which skill should I use", "what is available", "help", "what can I use", "show me the skills", "which tool", "I don't know which skill".

• dev-meta-install

  Adds the dev best practices rules as a structured block to the CLAUDE.md (or, for Copilot CLI, optionally .github/copilot-instructions.md) of a target project — or updates an existing block. Can also copy the skill library itself into a project for standalone GitHub Copilot CLI discovery. Use this s

• dev-meta-sync

  Checks whether the compact claude/*.md rule files still reflect the essence of the detailed reference/*.md — finds sections that are new/changed in reference/ but not yet transferred to claude/. Use this skill for maintaining this dev-best-practices repo itself; triggers for "synchronize rules", "up

• dev-review-app

  Complete end-to-end evaluation of an app/codebase — measures the codebase against the dev-best-practices rules of this repo (essential/app/github/architecture). Axes: Architecture (12-Factor), Security (OWASP ASVS 5.0/Top 10), CI-CD-Delivery (DORA), Code Quality, Tests, Observability. Use this skill

• dev-review-arch

  Architecture review skill grounded in CMU 17-633 (Architectures for Software Systems, Prof. David Garlan) and Martin Fowler's architectural patterns. Use this skill whenever the user shares an existing system architecture and wants it reviewed, critiqued, or improved. Triggers: "review my architectu

• dev-review-llm

  LLM system review grounded in CMU 11-667 (Harms + Attacking LLMs), Berkeley CS294-196 (Safety/Guardrails), and OWASP LLM Top 10. Use this skill whenever the user wants to review an existing LLM-powered system or feature for architecture quality, eval coverage, safety, and production readiness. Trigg

• dev-review-public

  Pre-publication repository scan grounded in OpenSSF Best Practices, GitHub Security Hardening docs, CISA Security-by-Design (2023), OWASP DevSecOps Guideline, GitGuardian State of Secrets Sprawl, and OpenSSF Scorecard. Use this skill whenever the user wants to audit a repository before or after goin

• dev-review-secure

  Security-focused code review skill grounded in TU Graz ISEC Major curriculum and top-university references (Stanford CS255/CS355, MIT 6.566/6.5610, CMU 15-414). Use this skill whenever the user shares code and asks for a review, audit, security check, vulnerability scan, or wants to know if their co

• dev-review-ux-artifacts

  Structural UX/UI audit grounded in Jesse James Garrett's "The Elements of User Experience" (5-plane model) and Rosenfeld/Morville/Arango's "Information Architecture for the Web and Beyond", plus a practice-based anti-generic-AI-visual-design checklist. Audits whether an existing design or interface

• dev-review-ux

  Systematic UX audit of an existing product, feature, or design against the four canonical Human-AI Interaction frameworks: Microsoft HAX 18 Guidelines (Amershi et al., CHI 2019), Google PAIR Guidebook (23 Patterns), CHI 2024 Generative AI Design Principles (IBM Research, 6 Principles), and Nielsen N

• dev-tool-a11y

  Accessibility audit workflow grounded in WCAG 2.2 (W3C), CMU HCII 05-332 (Prof. Carrington) and W3C WAI Digital Accessibility Foundations. Covers automated audit (axe-core/Lighthouse), keyboard navigation, screen reader testing (NVDA, JAWS, VoiceOver) and EU Accessibility Act / EN 301 549 / BFSG com

• dev-tool-debug

  Stack-aware debugging assistant. Analyzes an error or unexpected behavior, automatically detects the stack/framework, and delivers a structured root-cause plan with concrete fix suggestions. Use this skill whenever the user reports a bug, error message, unexpected behavior, or asks "why does X not w

• dev-tool-perf

  Performance engineering workflow grounded in MIT 6.172 (Leiserson/Shun, fully available on MIT OCW) and "Systems Performance" (Brendan Gregg, Addison-Wesley 2020). Covers USE Method (Utilization/Saturation/Errors), flamegraph analysis, bottleneck identification, Bentley Rules, and measurable before/

• dev-tool-style

  Stack-aware frontend styling assistant. Automatically detects the CSS framework, design system, and component library, then delivers consistent, maintainable styling decisions and fixes. Includes visual design fundamentals (color, typography, spacing, loading states) for developers without a design

• dev-tool-test

  Stack-aware test assistant. Automatically detects language, framework, and existing test setup, then designs or generates appropriate tests (unit, integration, E2E) according to the test pyramid. Use this skill whenever the user wants to write, improve, or review tests; triggers for "write tests", "

Slash commands (29)

• /dev:design-api

  API contract design and review based on CMU 17-625 and Google API Design Guide.

• /dev:design-app

  From app idea to well-founded architecture/stack decisions (based on the built-in rules).

• /dev:design-cicd

  CI/CD pipeline design based on "Accelerate" (DORA) and "Continuous Delivery" — pipeline architecture, deployment strategies (blue-green, canary, feature flags), DORA metrics.

• /dev:design-data

  Data model design and review based on CMU 15-445 and Stanford CS245.

• /dev:design-iac

  Infrastructure as Code design based on Kief Morris (O'Reilly 2021) and NTNU IIKG3005 — IaC principles, module design, state management, drift detection, GitOps.

• /dev:design-llm

  LLM system design — integration patterns (RAG/fine-tune/agent/prompting), architecture, evaluation strategy, and production decisions based on Stanford CS224N, CMU 11-667, and Chip Huyen.

• /dev:design-migration

  Structured migration plan based on MIT 6.5840 and Fowler Patterns.

• /dev:design-observability

  Observability architecture based on the Google SRE Books — SLO/SLI/error budget, golden signals, distributed tracing (OpenTelemetry), SLO-based alerting, incident response.

• /dev:design-public

  Plan the safe path to making a repository public — secrets audit, governance docs, license, branch protection, CI/CD hardening, supply chain.

• /dev:design-secure

  Security-first app design based on TU Graz ISEC, Stanford CS255/CS355, and MIT 6.566.

• /dev:design-ux-artifacts

  Structural, artifact-driven UX design based on Garrett's Elements of UX and Information Architecture for the Web — problem brief, task/domain model, IA, wireframe, anti-generic-AI visual design.

• /dev:design-ux

  UX/UI design based on CMU HCII, Stanford CS247A, Microsoft HAX Guidelines, Google PAIR, and CHI 2024 — interaction, trust, AI features, anti-patterns.

• /dev:meta-create-skill

  Creates a new skill for this plugin following the established methodology — topic → academic research (university curricula + canonical books) → SKILL.md + references/. Use this skill when you want to create a new /dev skill. Trigger phrases: "create a new skill", "build a new skill", "create skill

• /dev:meta-drift

  Checks whether the best-practices block in CLAUDE.md is still current — shows missing, outdated, and new rules since the last install.

• /dev:meta-help

  Navigation menu — shows all available Dev Best Practices skills and starts the chosen one directly.

• /dev:meta-install

  Installs or updates dev best practices rules in CLAUDE.md. Automatically detects whether initial installation or update is needed. Flags — --essential (default), --full, --update, --section <name>.

• /dev:meta-sync

  Repo maintenance - checks whether claude/*.md still reflects the essence of reference/*.md and finds drift between master and derived files.

• /dev:review-app

  Complete app audit against the dev best practices rules (6 axes, parallel subagents).

• /dev:review-arch

  Structured architecture review based on CMU 17-633 and Martin Fowler Patterns.

• /dev:review-llm

  LLM system review — architecture, eval coverage, safety (OWASP LLM Top 10, prompt injection, excessive agency), and production readiness based on CMU 11-667 and Berkeley CS294-196.

• /dev:review-public

  Scan a repository before (or after) going public — finds secrets in history, PII in test fixtures, missing governance files, branch protection gaps, and supply chain risks.

• /dev:review-secure

  Security code review based on TU Graz ISEC, Stanford CS255/CS355, MIT 6.566, and CMU 15-414.

• /dev:review-ux-artifacts

  Structural UX audit — information architecture, requirement-to-UI traceability, and anti-generic-AI visual design detection.

• /dev:review-ux

  UX audit against Microsoft HAX, Google PAIR, CHI 2024, and Nielsen Norman Group — AI anti-patterns, dark patterns, trust design.

• /dev:tool-a11y

  Accessibility audit based on WCAG 2.2 — axe-core, keyboard navigation, screen reader testing (NVDA/VoiceOver), EU Accessibility Act / BFSG / EN 301 549 compliance.

• /dev:tool-debug

  Stack-aware debugging — automatically detects framework/stack and delivers a root-cause plan with concrete fix suggestions.

• /dev:tool-perf

  Performance engineering workflow based on MIT 6.172 (Bentley Rules) and Brendan Gregg USE Method — systematic bottleneck analysis with flamegraphs, profiling, and verified before/after benchmarks.

• /dev:tool-style

  Stack-aware styling assistant — detects CSS framework and design system, delivers consistent styling solutions that fit the existing system.

• /dev:tool-test

  Stack-aware test assistant — detects test framework and coverage status, writes or improves tests according to the test pyramid.

Similar plugins