Tag: code-quality

Connects Claude Code to the Intelephense PHP language server for code intelligence and diagnostics. Install intelephense globally with npm first. Official Anthropic plugin.

Vercel's guide to React composition patterns: replaces boolean prop sprawl with compound components, lifted state and clean Context interfaces, including React 19 API changes. Useful for refactoring component libraries and reviewing component architecture.

React and Next.js performance rules from Vercel's engineering team: 70 rules ranked by impact covering request waterfalls, bundle size, server performance and re-renders, for writing, reviewing and refactoring. Maintained by Vercel.

All-in-one toolchain for web projects: fast formatting and linting with 500+ rules for JS, TS, JSX, JSON, CSS and GraphQL. Formatting is highly compatible with Prettier, and check --write applies all fixes in one pass.

Style and convention linter for Swift, with most rules built on SwiftSyntax. Configure it with .swiftlint.yml, auto-correct with --fix, and run it in an Xcode build phase or as a SwiftPM plugin.

Semantic multi-language static analysis: find vulnerabilities and bugs with rules that look like source code, across 30+ languages with custom rules. Scans locally by default without uploading code; cross-file analysis and Pro rules require sign-in.

Semgrep's official MCP server, now part of the main semgrep repo and started with semgrep mcp: lets agents run static security scans, find issues with custom rules and inspect syntax trees. Requires the Semgrep CLI; connecting to the AppSec platform needs SEMGREP_APP_TOKEN.

AST-based structural code search, lint and bulk rewrite tool: matches code patterns rather than text, with $VAR wildcards for nodes, making it well suited to agents doing large cross-file refactors.

Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing.

Runs React Doctor via npx to scan React code for security, performance, correctness, accessibility and architecture issues with a 0-100 health score; checks changed code for regressions, and on /doctor fetches the official triage playbook to fix issues.

Audits a whole React codebase read-only: runs a React Doctor scan as evidence, vets findings across bugs, performance, accessibility, security and maintainability, ranks them by leverage, then writes self-contained plans other agents can execute. Never edits source.

Runs an extremely strict maintainability review of the current branch: hunts for restructurings that make the change dramatically simpler and flags files pushed past 1,000 lines, ad-hoc conditionals, thin wrappers and needless casts. From Cursor's official plugins; invoke manually.

Linter and formatter for 20+ SQL dialects that auto-fixes most issues and handles Jinja templating and dbt projects (dbt needs a plugin), suited to warehouse code review and CI.

Uses a strong model to audit your codebase and list evidence-backed issues across correctness, security, performance and testing, writes a plan a cheaper model can execute, and reviews the results. It never edits code itself. By shadcn.

Trail of Bits static analysis skills: CodeQL for interprocedural taint tracking and data-flow analysis, Semgrep for rule-based scanning, plus parsing and deduplicating SARIF results. Requires CodeQL or Semgrep installed locally.

Applies Anthony Fu's conventions for JavaScript and TypeScript projects: file organization, explicit imports, Vitest style, @antfu/ni, @antfu/eslint-config with antislop, Knip, tsdown and a single ci script, mirroring the antfu/starter-ts template for new projects.

Narrows React component prop types to match live call sites rather than widened story, mock or test contracts: classifies each prop as required, optional or removed from non-test usage, derives types from real APIs, and updates stories and tests to fit.

Guides the agent in writing library-grade Vue composables whose inputs accept a plain value, ref or getter: choose MaybeRefOrGetter or MaybeRef depending on whether the input is read-only or writable, and normalize with toValue() and toRef() inside watchers. Requires Vue 3 or Nuxt 3+.

Default workflow for Vue work: standardizes on Vue 3, the Composition API and script setup with TypeScript, reads core references on reactivity, SFCs, data flow and composables, plans component boundaries first, loads topics like slots, transitions and performance only when needed, then self-checks.

Skills Sentry's engineering team uses itself: code review, bug finding, security review, writing commits and PRs, and iterating on a PR until CI passes. Maintained by Sentry; some skills follow its internal conventions.

Official SonarSource server: connects to SonarQube Server or Cloud so agents can query code issues, quality gates, security hotspots and dependency risks, and analyze file contents directly. Needs a SonarQube token; Docker is the recommended way to run it.

Opinionated guide to production TypeScript with Effect v4: Effect.gen workflows, Context.Service and Layer services, Schema models and typed errors, Config, Schedule retries, Cache, Stream, HttpClient and deterministic tests, plus patterns to avoid. Requires Effect v4.

Has the agent use the @sveltejs/mcp CLI via npx whenever it creates, edits or analyzes Svelte components or modules: list and fetch Svelte 5 and SvelteKit docs sections, and run svelte-autofixer to catch issues and validate every component before finishing. Official Svelte skill.

Sonar's official plugin bringing SonarQube checks into the agent coding loop: secrets-scanning hook, issue fixing, quality gates, coverage and dependency risk; with Vortex analysis on, every edit is checked. Needs SonarQube (free Community Build works), the sonar CLI and Docker.