360 Secure SkillHub
360 安全技能中心

Code Quality

该 Skill 提供命名、格式、错误处理、安全与无障碍规范，适合编写或评审代码及实现 UI/UX 时参考；引用的三个详细参考文件缺失，lint 标记 destructive_action 与 missing_refs。

urbantech
urbantech
热度 97.77
最近更新 2026-05-11 17:35:43
分类：开发依赖：纯提示词应用场景：代码审查 / 代码生成

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add code-quality
Metadata
name
code-quality
description
Coding style standards, security guidelines, and accessibility requirements. Use when (1) Writing new code, (2) Reviewing code for style/security, (3) Implementing UI/UX features, (4) Addressing security concerns, (5) Ensuring accessibility compliance. Covers naming conventions, formatting, security best practices (no secrets/PII), accessibility standards (semantic HTML, keyboard nav), and responsive design.

Code Quality Standards

Coding Style

  • Naming: camelCase for vars/functions; PascalCase for classes/types
  • Formatting: 4-space indentation; target ≤80 chars (wrap thoughtfully)
  • Comments: Meaningful, current; delete stale comments
  • Security: Never log secrets/PII; validate inputs; least privilege by default
  • Errors/Logs: Explicit error types; structured logs by level; actionable messages

Accessibility & UX Quality

  • Favor semantic roles/labels; keyboard nav and focus order must work
  • Include responsive checks at 375, 768, 1024, 1440 with notes/screenshots
  • Use deterministic test IDs; avoid brittle CSS/XPath

Security & Compliance Guardrails

  • No real credentials in code, tests, or screenshots
  • Use test accounts/fixtures; redact secrets
  • Follow least-privilege and input validation
  • Document threat considerations in PR when relevant

Reference Files

See references/coding-style.md for detailed style guide, formatting rules, comment standards.

See references/security-checklist.md for security validation checklist, threat modeling, PII handling.

See references/accessibility-standards.md for WCAG compliance, semantic HTML patterns, keyboard nav testing.