curl -fsSL https://claude.ai/install.sh | bash

irm https://claude.ai/install.ps1 | iex

curl -fsSL https://claude.ai/install.cmd -o install.cmd && install.cmd && del install.cmd

brew install --cask claude-code

npm install -g @anthropic-ai/claude-code

npm config set os linux
npm install -g @anthropic-ai/claude-code --force --no-os-check

# 进入项目目录
cd /path/to/your/project

# 启动Claude Code
claude

# 首次使用时会提示登录
# 也可以手动触发登录
/login

# 检查安装健康状态
claude doctor

# 查看版本和状态信息
claude /status

# 显示帮助信息
claude /help

claude

> what does this project do?
> what technologies does this project use?
> where is the main entry point?
> explain the folder structure
> list the key dependencies

# 列出所有会话
claude --list-sessions

# 获取会话详情
claude --session-info session-name

# 重命名会话
/rename new-session-name

# 删除会话
claude --delete-session session-name

# 清空当前对话历史
/clear

# 压缩对话历史
/compact

# 回退到上一个状态
/rewind

# 创建命令目录
mkdir -p .claude/commands

# 创建新命令文件（使用.md或.txt扩展名）
echo "Analyze this code for performance issues and suggest optimizations:" > .claude/commands/optimize.md

# 使用命令
/optimize

# 创建 fix-issue.md
echo 'Fix issue #$ARGUMENTS following our coding standards' > .claude/commands/fix-issue.md

# 使用：
/fix-issue 123

# 创建带多参数的命令 review-pr.md
echo 'Review PR #$1 with priority $2' > .claude/commands/review-pr.md

# 使用：
/review-pr 456 high

# 创建个人命令目录
mkdir -p ~/.claude/commands

# 创建命令
echo "Review this code for security vulnerabilities:" > ~/.claude/commands/security-review.md

# 任何项目中都可用
/security-review

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "jq -r '\\'\\(.tool_input.command)\\'' >> ~/.claude/bash-command-log.txt"
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "npx prettier --write \"$file_path\""
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "npx prettier --write \"$file_path\""
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "npx eslint --fix \"$file_path\" 2>/dev/null || true"
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "python3 -c \"import json, sys; data=json.load(sys.stdin); path=data.get('tool_input',{}).get('file_path',''); sys.exit(2 if any(p in path for p in ['.env', '.git/', 'secrets']) else 0)\""
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "npm test 2>&1 | tail -20"
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "echo \"[$(date)] User: $(whoami) Command: $(<stdin)\" >> ~/.claude/command-audit.log"
          }
        ]
      }
    ]
  }
}

{
  "hooks": {
    "Notification": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "notify-send 'Claude Code' 'Task completed, awaiting your input'"
          }
        ]
      }
    ]
  }
}

claude mcp add --transport http github https://api.githubcopilot.com/mcp/

claude mcp add --transport sse asana https://mcp.asana.com/sse

claude mcp add --transport stdio airtable --env AIRTABLE_API_KEY=YOUR_KEY -- npx -y airtable-mcp-server

# 列出所有配置的服务器
claude mcp list

# 获取特定服务器的详细信息
claude mcp get github

# 删除服务器
claude mcp remove github

# 在Claude Code会话中查看和管理
/mcp

---
description: Code reviewer for security analysis
tools: ["Read", "Grep", "Glob"]
model: "claude-3-5-sonnet-20241022"
---

# Security Code Reviewer

You are a senior code security reviewer. Your role is to analyze code for:
- Security vulnerabilities (SQL injection, XSS, CSRF, etc.)
- Authentication and authorization issues
- Data protection and privacy concerns
- Cryptography best practices
- API security issues

When reviewing code:
1. Identify all potential vulnerabilities
2. Explain the risk level for each
3. Suggest specific fixes with code examples
4. Recommend additional security measures

# Code Review Skill

这个Skill帮助进行全面的代码审查和质量检查。

## 功能

- 安全漏洞分析
- 代码质量检查
- 性能优化建议
- 最佳实践验证

## 使用场景

当您想要：
- 审查代码质量
- 检查安全问题
- 验证性能
- 确保符合规范

使用这个Skill。

## 示例

### 安全审查

{
  "env": {
    "HTTP_PROXY": "http://127.0.0.1:7897",
    "HTTPS_PROXY": "http://127.0.0.1:7897",
    "NO_PROXY": "localhost,127.0.0.1",
    "CLAUDE_CODE_MAX_OUTPUT_TOKENS": "32000",
    "BASH_DEFAULT_TIMEOUT_MS": "600000",
    "MCP_TIMEOUT": "30000"
  },
  "model": "sonnet",
  "outputStyle": "Explanatory",
  "permissions": {
    "mode": "ask",
    "allow": [
      "Bash(npm run lint:*)",
      "Bash(npm run test:*)",
      "Read(~/.zshrc)",
      "Edit",
      "Glob",
      "Grep",
      "WebFetch"
    ],
    "deny": [
      "Bash(curl:*)",
      "Bash(ssh:*)",
      "Bash(sudo:*)",
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./secrets/**)",
      "WebFetch(https://sensitive-api.com/**)"
    ]
  },
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "npx prettier --write \"$file_path\""
          }
        ]
      }
    ]
  },
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true,
    "excludedCommands": ["git", "docker"]
  },
  "attribution": {
    "commit": "Generated with Claude Code"
  },
  "statusLine": {
    "type": "command",
    "command": "echo 'Claude Code: Ready'"
  }
}

{
  "env": {
    "ANTHROPIC_AUTH_TOKEN": "sk-...",
    "ANTHROPIC_BASE_URL": "https://api.anthropic.com",
    "HTTP_PROXY": "http://proxy:port",
    "HTTPS_PROXY": "http://proxy:port",
    "NO_PROXY": "localhost,127.0.0.1",
    "CLAUDE_CODE_MAX_OUTPUT_TOKENS": "32000",
    "BASH_DEFAULT_TIMEOUT_MS": "600000",
    "MCP_TIMEOUT": "30000",
    "CUSTOM_VAR": "value"
  }
}

# 在会话中
Shift+Tab  # 循环切换模式

# 在配置中
/config

{
  "permissions": {
    "allow": [
      "Bash(git diff:*)",         # 允许git diff命令
      "Bash(npm run build:*)",    # 允许npm run build:*
      "Bash(npm run test:*)",     # 允许npm run test:*
      "Read(/path/to/file)",      # 允许读取文件
      "Read(/path/to/dir/**)",    # 允许读取目录
      "Edit(/path/to/dir/**)",    # 允许编辑目录下文件
      "Glob",                      # 允许文件搜索
      "Grep",                      # 允许内容搜索
      "WebFetch",                  # 允许网页获取
      "SlashCommand:/review-pr:*"  # 允许自定义命令
    ],
    "deny": [
      "Bash(curl:*)",             # 拒绝curl
      "Bash(ssh:*)",              # 拒绝ssh
      "Bash(sudo:*)",             # 拒绝sudo
      "Read(./.env)",             # 拒绝读取.env
      "Read(./.env.*)",           # 拒绝读取所有.env文件
      "Read(./secrets/**)",       # 拒绝读取secrets目录
      "WebFetch(https://sensitive-api.com/**)",  # 拒绝访问敏感API
      "Edit(./production/**)"     # 拒绝编辑生产代码
    ]
  }
}

# Project Name

## Overview
本项目是一个[描述]，目的是[目的]。主要为[用户/系统]提供[功能]。

## Architecture

### 高层架构

npm run dev

npm test              # 所有测试
npm test:watch      # 监听模式
npm test:coverage   # 覆盖率报告

npm run build       # 生产构建
npm run build:dev   # 开发构建

npm run lint        # 检查风格
npm run lint:fix    # 修复风格问题
npm run format      # 格式化代码

npm run db:migrate      # 执行迁移
npm run db:generate     # 生成Prisma客户端
npm run db:reset        # 重置数据库

docker-compose up       # 启动所有服务
docker-compose down     # 停止所有服务
docker-compose build    # 构建镜像

# ~/.wslconfig
[wsl2]
networkingMode=mirrored

# 以管理员身份运行PowerShell

# 获取WSL2 IP
wsl hostname -I

# 创建防火墙规则
New-NetFirewallRule `
  -DisplayName "Allow WSL2 IDE" `
  -Direction Inbound `
  -Protocol TCP `
  -Action Allow `
  -RemoteAddress 172.21.0.0/16 `
  -LocalAddress 172.21.0.0/16

cd /path/to/project
claude

# 阶段1：整体了解
> give me a high-level overview of this codebase

> what is the main purpose of this project?

> what technologies and frameworks are used?

> explain the overall architecture and component relationships

# 阶段2：细节了解
> what are the key data models and their relationships?

> how is user authentication and authorization implemented?

> what are the main API endpoints and what do they do?

# 阶段3：开发信息
> what are the main coding patterns and conventions used here?

> how do you run tests and build the project?

> what are the deployment processes?

# 描述问题
> I'm seeing a blank screen error when I run the login flow

# 提供重现步骤
> Here's how to reproduce it:
> 1. Go to /login
> 2. Enter wrong credentials
> 3. Click submit
> The page goes blank instead of showing an error message

# 要求分析
> analyze the login component and API error handling

> what could be causing the blank screen?

> suggest a few ways to fix this issue

# 应用修复
> @src/components/Login.tsx update to add proper error handling as you suggested

# 验证修复
> run the test suite to make sure the fix doesn't break anything

> let's test the login flow manually

# 分析当前代码
> analyze @src/utils/helpers.ts for code quality issues

# 识别改进机会
> what modern JavaScript features could improve this code?

> suggest a refactoring plan

# 制定重构计划
> let's refactor utils.js step by step to use modern ES2024 features while maintaining backward compatibility

# 分步实施
> create a new version of the utility functions using destructuring and async/await

# 测试验证
> run the test suite for the refactored code

# 处理边界情况
> add handling for edge cases like null values and empty arrays

# 最后验证
> run the full test suite one more time to ensure everything works

# 分析覆盖率
> find functions in @src/services/NotificationService.ts that don't have test coverage

# 理解现有测试
> show me the structure of existing tests in the test directory

# 创建测试
> write comprehensive unit tests for the NotificationService

# 覆盖边界情况
> add test cases for these edge conditions:
> - Null or undefined inputs
> - Empty arrays
> - API timeout scenarios
> - Permission denied errors

# 运行测试
> run the new tests and show me the results

# 修复失败的测试
> the test failed with this error: [paste error]. Fix the test.

# 查看变更
> what files have I changed in this session?

> show me a summary of all changes

# 创建分支（如需要）
> create a new branch called feature/user-dashboard

# 制作提交消息
> write a clear commit message following conventional commits format

# 创建PR
> create a pull request with a detailed description

# 增强PR描述
> enhance the PR description with:
> - What changed and why
> - How to test the changes
> - Any breaking changes or migration steps needed

# 验证PR
> verify that all checks pass

# 方式1：启动时使用Plan Mode
claude --permission-mode plan

# 方式2：在会话中切换
Shift+Tab  # 循环切换权限模式，直到到达plan模式

# 定期压缩对话以减少token使用
/compact

# 查看当前context使用情况
/context

# 查看token成本
/cost

# 重新开始新对话
/clear

# 解决方案
npm config set os linux
npm install -g @anthropic-ai/claude-code --force --no-os-check

# 检查Node路径
which npm
which node

# 应该指向/usr/路径，不是/mnt/c/
# 如果不正确，更新PATH变量

# 确保nvm在shell初始化文件中加载
# 编辑 ~/.bashrc 或 ~/.zshrc
export NVM_DIR="$HOME/.nvm"
[ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"

# 在当前会话中应用
source ~/.nvm/nvm.sh

curl -fsSL https://claude.ai/install.sh | bash

# 清除npm缓存
npm cache clean --force

# 重新安装
npm install -g @anthropic-ai/claude-code

/permissions

# 在允许列表中添加
Bash(npm run lint:*)
Bash(npm run test:*)
Edit
Glob
Grep

# 完全登出
/logout

# 关闭Claude Code终端窗口

# 重新启动
claude

# 如果问题持续
rm -rf ~/.config/claude-code/auth.json
rm -rf ~/.claude/auth.json

# 重新启动
claude

# 登出当前账户
/logout

# 登入不同账户
/login

# 或在命令行
claude --account different-account@example.com

# 压缩对话历史
/compact

# 查看context大小
/context

# 关闭并重启Claude Code

# 在settings.json中增加较大目录到忽略列表
# 编辑 ~/.claude/settings.json 或 .claude/settings.json

{
  "env": {
    "CLAUDE_CODE_MAX_OUTPUT_TOKENS": "16000",
    "BASH_DEFAULT_TIMEOUT_MS": "60000"
  },
  "permissions": {
    "deny": [
      "Read(node_modules/**)",
      "Read(.git/**)",
      "Read(dist/**)",
      "Read(build/**)"
    ]
  }
}

# 中止当前操作
Ctrl+C

# 如果无响应，关闭终端窗口并重启

# 增加超时时间
# 在 ~/.claude/settings.json
{
  "env": {
    "BASH_DEFAULT_TIMEOUT_MS": "600000",
    "MCP_TIMEOUT": "60"
  }
}

# 使用更具体的搜索而不是全局搜索
> Search for JWT validation logic in the auth-service package

> Find all uses of md5 hash in JavaScript files

# 对于大型项目，将项目移到Linux文件系统
# /home/ 而不是 /mnt/c/

{
  "keybindings": [
    {
      "key": "escape",
      "command": "-workbench.action.closeQuickOpen"
    }
  ]
}

# 找到WSL2 IP
wsl hostname -I  # 例如: 172.21.0.1

# 在Windows PowerShell中（以管理员身份）
New-NetFirewallRule -DisplayName "Allow WSL2" `
  -Direction Inbound `
  -Protocol TCP `
  -Action Allow `
  -RemoteAddress 172.21.0.0/16 `
  -LocalAddress 172.21.0.0/16

# ~/.wslconfig
[wsl2]
networkingMode=mirrored

# 卸载扩展
# 在VS Code中打开命令面板：Cmd+Shift+P / Ctrl+Shift+P
# 搜索 "Extensions: Uninstall Extension"
# 选择 Claude Code

# 重新安装
# 搜索 Claude Code 并重新安装

# 重启VS Code

# 1. 检查网络连接
ping google.com

# 2. 启动新对话（旧会话可能有问题）
claude
/clear

# 3. 尝试CLI验证（更详细的错误信息）
claude doctor

# 4. 检查配置
/status

# 5. 重新登录
/logout
/login

# 在Linux上，如果没有ripgrep
brew install ripgrep  # macOS
sudo apt install ripgrep  # Ubuntu/Debian

# 然后设置
export USE_BUILTIN_RIPGREP=0

# 查看权限规则
/permissions

# 确保文件不在deny列表中
# 添加到allow列表
Edit

# 确保文件不被其他程序锁定
lsof /path/to/file  # macOS/Linux

/bug

/doctor

# 查看Claude Code日志
tail -f ~/.claude/logs/claude.log

# 或在macOS
log stream --predicate 'process == "claude"'

/config
# 找到 "Enable Thinking Mode" 或 "Thinking"
# 启用并保存

# 进入详细模式
Ctrl+O

# 或设置
/config
# 启用 "Show Extended Thinking" 或 "Verbose Output"

{
  "env": {
    "MAX_THINKING_TOKENS": "10000"
  }
}

# 继续最近的会话
claude --continue
# 或
claude -c

# 恢复特定会话
claude --resume auth-refactor
# 或在交互式选择器中选择
claude --resume

# 列出所有会话
claude --list-sessions

# 获取会话详情
claude --session-info session-name

# 重命名会话
/rename new-name

# 删除会话
claude --delete-session session-name

# 当前仅在CLI中可用
# 在会话中，Claude自动保存状态

name: Claude Code Review
on:
  pull_request:
    types: [opened, synchronize, reopened]

jobs:
  claude-review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Review PR with Claude Code
        uses: anthropics/claude-code@main
        with:
          args: "--permission-mode plan -p 'Review this PR for security, performance, and best practices'"
          api-key: ${{ secrets.ANTHROPIC_API_KEY }}

      - name: Security Scan
        uses: anthropics/claude-code@main
        with:
          args: "-p 'Scan for security vulnerabilities and suggest fixes'"
          api-key: ${{ secrets.ANTHROPIC_API_KEY }}

# GitLab CI
script:
  - claude -p "Review code for issues"

# Jenkins
sh 'claude -p "Build and test the project"'

# 通用
curl -X POST ... | claude -p "Process and analyze"

{
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true,
    "timeoutMs": 300000,
    "excludedCommands": [
      "git",
      "docker",
      "sudo",
      "ssh"
    ]
  }
}