Skip to content
cccskills
FreePublished on GitHub

solid

SOLID design review rules (SRP, OCP, LSP, ISP, DIP) for code reviews: what counts as a real design finding, what is only taste, how to cite it and how severe it is. Use when reviewing a diff, a pull request or recent changes for design problems, when asked for a "SOLID review", "design review", "is this class doing too much", or when a review checklist asks for SOLID. Pair it with the dry skill for duplication and with owasp-asvs for security.

The English summary is being prepared. Showing the original description.

See how to install

Files included (1)

  • SKILL.md3.8 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

SOLID Review

A design finding is worth reporting only when the design already costs something or will on the next ordinary change — a bug, an inconsistency, a change that has to touch many places, a unit that cannot be tested. Style, naming taste, "could be more elegant" and textbook purity are never findings.

Scope

Review the changed code and what it calls, read whole — not only the diff hunks. Judge the change against the conventions the repository already follows (its AGENTS.md/CLAUDE.md, existing seams and patterns). A repo that keeps small scripts procedural is not violating SOLID by doing so.

Rules

SRP — Single Responsibility

One unit (function, class, module, service) has to change for two unrelated reasons. Name both reasons in the finding.

  • Finding: an HTTP controller that validates input, builds SQL, renders e-mail and spawns a child process; a Drupal form submit handler that also syncs to a remote API.
  • Not a finding: a long function that does one thing in several steps.

OCP — Open/Closed

Adding the next variant (a check, a backend, a provider, a content type) requires editing a switch/if chain in several places instead of one registration point (a map, a plugin type, a tagged service, an event subscriber).

  • Cite every place the next variant would have to touch.
  • Not a finding: a single match in one place that is the registration point.

LSP — Liskov Substitution

An implementation that throws, no-ops or silently changes meaning for part of the contract it claims, so that callers must know which concrete class they have (instanceof checks, "not supported" exceptions, a subclass that ignores an argument).

ISP — Interface Segregation

Callers are forced to depend on methods they never use, or implementers must stub out half an interface. Cite the unused methods and the stubbing implementers.

DIP — Dependency Inversion

Business logic hard-wired to a concrete I/O dependency (network, filesystem, database, clock, child process, a static \Drupal::service() call inside a class that supports injection) so that it cannot be tested or swapped without it — where the codebase already has a seam for that dependency elsewhere (DI container, an injected client, a clock service). Without an existing seam, report it only if it already blocks a test the change needs.

Severity

  • high — the design problem has already produced a bug or an inconsistency you can point to (two branches of an if chain disagree, a stubbed method is called in production).
  • medium — default: the next ordinary change will have to touch several places or cannot be tested without real I/O.
  • low — cleanup that would help but costs nothing today.

Reporting a finding

Each finding carries:

  • rule — SRP, OCP, LSP, ISP or DIP;
  • location — file:line (every location for OCP);
  • cost — one sentence: what breaks or what the next change has to do because of it;
  • fix direction — the smallest change that removes the cost, preferring a seam the codebase already has over a new abstraction.

Verify each finding against the code before keeping it: re-read the lines and confirm the cost is real. Fewer, true findings beat a long list. A disagreement with the overall approach of a change is one finding, not a rewrite.

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Safe deployment workflow for Drupal 10/11 sites: pre-flight checks, backup, the correct update sequence (composer install, database updates, config import, cache rebuild), verification, and rollback plan. Use when deploying to any environment, releasing to production, or when the user asks to "push changes live", "update the server", or run a release. Also use for multisite releases where each site needs its own database update pass.

The English summary is being prepared. Showing the original description.

siva01c/claude-plugins16Updated Sep 26, 2026

Use this skill when authoring or editing Docker Compose files (compose.yaml / docker-compose.yml), running multi-container stacks, or containerizing a Drupal/PHP application — e.g. "set up a local Drupal stack with nginx and MariaDB", "add Redis to my compose file", "why won't my containers start", "split dev and prod compose configuration". Also trigger for compose commands (up, down, logs, exec, watch) and healthcheck/dependency issues between services.

The English summary is being prepared. Showing the original description.

siva01c/claude-plugins16Updated Sep 26, 2026

Use this skill when running local AI models with Docker Model Runner — the `docker model` CLI — e.g. "run an LLM locally with Docker", "pull a model from the ai/ namespace", "connect my app to a local model", "use a local model as backend for the Drupal AI module", or when wiring the `models:` top-level element into a compose.yaml. Covers pulling/running models, OpenAI-compatible endpoints, and Compose integration.

The English summary is being prepared. Showing the original description.

siva01c/claude-plugins16Updated Sep 26, 2026

Use for operational Drupal 11 workflows in DDEV environments, including safe updates, backup-first procedures, and troubleshooting commands.

The English summary is being prepared. Showing the original description.

siva01c/claude-plugins16Updated Sep 26, 2026

Use when creating or extending Drupal 11 custom modules, including scaffolding, service architecture, and dependency injection best practices.

The English summary is being prepared. Showing the original description.

siva01c/claude-plugins16Updated Sep 26, 2026

Use when auditing Drupal 11 custom modules/themes for security issues such as unsafe input handling, XSS risks, SQL injection, and access control gaps.

The English summary is being prepared. Showing the original description.

siva01c/claude-plugins16Updated Sep 26, 2026

See all skills by siva01c

Report a problem with this skill