developing-software
Software development knowledge reference covering Python, Go, Rust, TypeScript, Java, C++, and Shell. Use when writing code, debugging, or following language-specific best practices.
git clone --depth 1 https://github.com/telagod/code-abyss /tmp/developing-software && cp -r /tmp/developing-software/skills/developing-software ~/.claude/skills/developing-softwareSKILL.md
# 符箓秘典 · 开发语言 ## 路由 | 语言 | 秘典 | 核心场景 | |------|------|----------| | Python | [python](python.md) | FastAPI/Django、数据处理、自动化脚本 | | Go | [go](go.md) | goroutine 并发、微服务、云原生工具 | | Rust | [rust](rust.md) | 所有权系统、零成本抽象、系统编程 | | TypeScript | [typescript](typescript.md) | Node 后端、React/Vue SPA、Next.js SSR | | Java | [java](java.md) | Spring Boot、企业级、JVM 调优 | | C/C++ | [cpp](cpp.md) | 内存管理、高性能计算、嵌入式 | | Shell | [shell](shell.md) | Bash 脚本、系统管理、CI 胶水 | ## 选型决策 | 场景 | 首选 | 备选 | 判据 | |------|------|------|------| | Web 后端(快速) | Python(FastAPI) | Go(Gin) | 开发速度 vs 运行性能 | | Web 后端(高并发) | Go(Gin/Echo) | Rust(Axum) | 生态成熟度 vs 极致性能 | | Web 后端(企业) | Java(Spring Boot) | Go | 生态/团队 vs 部署简洁 | | Web 前端 SPA | TypeScript+React | TypeScript+Vue | 生态规模 vs 上手速度 | | SSR | Next.js | Nuxt.js | React 生态 vs Vue 生态 | | 系统编程 | Rust | C/C++ | 内存安全 vs 生态/遗产 | | CLI 工具 | Go | Rust | 编译速度 vs 运行性能 | | 脚本/自动化 | Python | Bash | 跨平台 vs 系统原生 | | 安全工具原型 | Python | Go/Rust | 快速迭代 vs 分发便利 | ## 通用模式 ``` 错误处理：Go(error返回) | Rust(Result<T,E>) | Python(try/except) | TS(try/catch) 并发：Go(goroutine+channel) | Rust(tokio) | Python(asyncio) | Java(虚拟线程) 依赖注入：Java(Spring) | Go(wire) | Python(dependency-injector) | TS(tsyringe) 测试：pytest | go test | cargo test | jest/vitest | JUnit ```
Analyzes code changes, detects documentation drift, and evaluates change impact scope. Use when reviewing diffs, checking doc sync, or running pre-commit analysis. Automatically triggered after design-level changes or refactoring.
Scans code for security vulnerabilities, detects dangerous patterns, and ensures security decisions are documented. Use when running security scans, auditing code, or checking for OWASP issues, injection risks, or sensitive data leaks. Automatically triggered on new modules, security-related changes, or post-refactor.
Processes Excel spreadsheet files (.xlsx, .xlsm, .csv). Creates workbooks, builds formulas, preserves formatting, analyzes tabular data, and validates financial models with zero-formula-error delivery. Use when working with spreadsheet files or tabular data analysis. Do NOT use for Word documents, PDFs, presentations, or database pipelines.
Frontend UI design system selector and implementation guide covering Glassmorphism, Liquid Glass (Apple-style), Neubrutalism, and Claymorphism. Use when building UI components, choosing a visual aesthetic, implementing design tokens, or auditing accessibility/contrast on themed surfaces. Provides per-style tokens, component patterns, dark mode, and a11y constraints.
安全架构与治理：威胁建模 (STRIDE/PASTA/LINDDUN)、零信任身份架构、IAM/SSO/MFA/PAM、合规框架 (SOC2/PCI/HIPAA/GDPR)、DLP、隐私工程、安全控制设计。Use when designing security architecture, threat modeling new systems, implementing zero-trust identity, designing IAM/SSO/PAM, building compliance evidence chains, or planning privacy-by-design.
DevOps knowledge reference covering Git workflows, testing strategies, DevSecOps, release pipeline orchestration (release.yml, multi-arch images, cosign integration), CI/CD pipelines, database management, observability, and performance optimization. Use when working with Git, CI/CD, release pipelines, ghcr image publishing, testing, monitoring, or infrastructure automation.
AI agent and LLM system engineering reference covering single-agent dev (ReAct, tool calling, plan-execute), multi-agent coordination (swarm, role decomposition, file locking), LLM security (prompt injection, jailbreak defense, output filtering), RAG architecture (chunking, hybrid retrieval, rerank), and prompt engineering / evaluation (RAGAS, LLM-as-Judge). Use when building AI agents, designing RAG pipelines, orchestrating multi-agent workflows, hardening LLM apps, or writing prompts.
Checks code quality metrics including complexity, duplication, naming conventions, and function length. Use when running quality gates, reviewing code smells, or checking lint rules. Automatically triggered on complex modules or post-refactor.