verify / docs
Verifying Markdown and docs changes
Files: .md, .mdx, .rst, .txt.
Run the checks under every change, add the checks for what your diff touches, then
apply the review prompts for what the tools miss. Usage is measured across
61 scanned repositories that write Markdown and docs; prompts come from
694 review discussions.
Run on every change
the tool most Markdown and docs repositories run for each check
-
Formatting Layout drift that buries the real change in the diff.
prettier44% · 27 of 61 repos autofixprettier --write .exit codes, docs, alternatives, where it runs
- Exit codes
0everything formatted1something was not formatted (--check)2prettier error - Commands seen
prettier --write .prettier --cache --check .prettier --cache -w . - Runs inpre-commit, ci, local
- Seen infreeCodeCamp/freeCodeCamp, kamranahmedse/developer-roadmap, iptv-org/iptv, 30-seconds/30-seconds-of-code, angular/angular, mui/material-ui
- Docshttps://prettier.io/docs/cli#exit-codes
- Exit codes
-
Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Type checking Wrong types, unhandled null or None, call signatures broken across modules.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
Review prompts for every change 82 in total
Add when the change touches
open the ones that describe your diff
Authentication, input handling, secrets, permissions
-
Security scanning Injection, unsafe APIs and tainted data reaching a sink.
codeql23% · 14 of 61 reposruns via GitHub Action github/codeql-action/analyze
exit codes, docs, alternatives, where it runs
- Runs inci
- Alternatives
semgrep8% - Seen innodejs/node, langflow-ai/langflow, mui/material-ui, neovim/neovim, prometheus/prometheus, nuxt/nuxt
- Docshttps://github.com/github/codeql
-
Secret scanning Credentials and tokens committed to the repository.
gitleaks3% · 2 of 61 reposgitleaks git --config=.gitleaks.toml --baseline-path=.gitleaks-baseline.json --log-opts=$SCAN_REF --report-format=sarif --report-path=gitleaks.sarif .exit codes, docs, alternatives, where it runs
- Commands seen
gitleaks git --config=.gitleaks.toml --baseline-path=.gitleaks-baseline.json --log-opts=$SCAN_REF --report-format=sarif --report-path=gitleaks.sarif .gitleaks versionpre-commit hook gitleaks - Runs inpre-commit, ci
- Seen inawslabs/mcp, awslabs/aidlc-workflows
- Docshttps://github.com/gitleaks/gitleaks
- Commands seen
-
Dependency audit Known-vulnerable or disallowed dependencies and licenses.
dependency-review3% · 2 of 61 reposruns via GitHub Action actions/dependency-review-action
exit codes, docs, alternatives, where it runs
- Runs inci
- Seen inprettier/prettier, awslabs/mcp
- Docshttps://github.com/actions/dependency-review-action
Public APIs, signatures, error paths, nullability
-
Type checking Wrong types, unhandled null or None, call signatures broken across modules.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
82 more in API, Error Handling, Null Handling — the playbook lists the top 12.
Service and framework code
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 25 of 61 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)analyze (language: 1)Tests (include: 5) - Runs inci
- Seen in30-seconds/30-seconds-of-code, nodejs/node, langflow-ai/langflow, sveltejs/svelte, microsoft/playwright, vitejs/vite
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Algorithms, parsers, data transforms
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Mutation testing Tests that keep passing whatever the code does.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Proofs and specifications Design-level bugs in protocols and algorithms, checked against a specification.
coq3% · 2 of 61 reposexit codes, docs, alternatives, where it runs
23 more in Algorithms — the playbook lists the top 12.
Threads, async code, locks, shared state
-
Concurrency model checking Races and orderings that fail only under specific interleavings.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Undefined-behaviour detection Memory-safety and aliasing violations in unsafe code.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Property-based tests Edge-case inputs nobody wrote a test for; invariants over generated data.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
2 more in Concurrency — the playbook lists the top 7.
Network calls, retries, timeouts, protocols
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Fuzzing Crashes, panics and hangs on malformed input, especially in parsers and decoders.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
18 more in Networking, Axios — the playbook lists the top 12.
UI components and pages
-
End-to-end browser tests User flows broken across components, routing and the network.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Linting Bug-prone patterns, unused code and conventions the formatter does not cover.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
20 more in React, Next, Next.js, Vue, Angular — the playbook lists the top 12.
Databases, migrations, caching
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 25 of 61 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)analyze (language: 1)Tests (include: 5) - Runs inci
- Seen in30-seconds/30-seconds-of-code, nodejs/node, langflow-ai/langflow, sveltejs/svelte, microsoft/playwright, vitejs/vite
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
17 more in Database, Migrations, Caching — the playbook lists the top 12.
Hot paths and performance
No tool-based check applies. The review prompts below are the verification.
17 more in Performance Optimization — the playbook lists the top 12.
Model, prompt and LLM code
-
Unit and integration tests Behaviour regressions on the paths the tests exercise.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
Logging, metrics, tracing
No tool-based check applies. The review prompts below are the verification.
14 more in Logging, Observability — the playbook lists the top 12.
CI workflows and configuration files
-
CI workflow linting Broken GitHub Actions syntax, script injection, over-broad token permissions.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
File hygiene Invalid JSON, YAML or TOML, merge markers, trailing whitespace, oversized files.
pre-commit-hooks13% · 8 of 61 repos autofixruns via pre-commit hook end-of-file-fixer
exit codes, docs, alternatives, where it runs
- Commands seen
pre-commit hook end-of-file-fixerpre-commit hook trailing-whitespacepre-commit hook check-added-large-files - Runs inpre-commit, ci
- Seen inlangflow-ai/langflow, fastapi/fastapi, bmad-code-org/bmad-method, astral-sh/ruff, pydantic/pydantic, SWE-agent/SWE-agent
- Docshttps://github.com/pre-commit/pre-commit-hooks
- Commands seen
142 more in CI/CD, Configurations — the playbook lists the top 12.
Dependencies and lockfiles
-
Dependency audit Known-vulnerable or disallowed dependencies and licenses.
dependency-review3% · 2 of 61 reposruns via GitHub Action actions/dependency-review-action
exit codes, docs, alternatives, where it runs
- Runs inci
- Seen inprettier/prettier, awslabs/mcp
- Docshttps://github.com/actions/dependency-review-action
-
Lockfile consistency A lockfile that no longer matches its manifest.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 25 of 61 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)analyze (language: 1)Tests (include: 5) - Runs inci
- Seen in30-seconds/30-seconds-of-code, nodejs/node, langflow-ai/langflow, sveltejs/svelte, microsoft/playwright, vitejs/vite
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
The tests themselves
-
Mutation testing Tests that keep passing whatever the code does.
No scanned repository in this language runs a tool for this. Lean on the review prompts.
-
Version and platform matrix Breakage on a runtime version, OS or feature combination you did not run locally.
ci-matrix41% · 25 of 61 reposanalyze (language: 2)exit codes, docs, alternatives, where it runs
- Commands seen
analyze (language: 2)analyze (language: 1)Tests (include: 5) - Runs inci
- Seen in30-seconds/30-seconds-of-code, nodejs/node, langflow-ai/langflow, sveltejs/svelte, microsoft/playwright, vitejs/vite
- Docshttps://docs.github.com/en/actions/how-tos/write-workflows/choose-what-workflows-do/run-job-variations
- Commands seen
Documentation and comments
-
Docs build Broken cross-references, links and markup in documentation.
mkdocs13% · 8 of 61 reposmkdocs buildexit codes, docs, alternatives, where it runs
- Commands seen
mkdocs buildmkdocs build --strictmkdocs build --strict -f mkdocs.yml - Runs inci, local
- Alternatives
sphinx2% - Seen inastral-sh/uv, traefik/traefik, astral-sh/ruff, pydantic/pydantic, jj-vcs/jj, argoproj/argo-cd
- Docshttps://github.com/mkdocs/mkdocs
- Commands seen
-
Spelling Typos in identifiers, comments and docs.
codespell8% · 5 of 61 reposcodespellexit codes, docs, alternatives, where it runs
- Commands seen
codespellcodespell --toml pyproject.tomlcodespell --toml pyproject.toml --write - Runs inpre-commit, ci, local
- Seen inlangflow-ai/langflow, gofiber/fiber, pydantic/pydantic, jj-vcs/jj, open-telemetry/opentelemetry-python
- Docshttps://github.com/codespell-project/codespell
- Commands seen
114 more in Documentation — the playbook lists the top 12.
Where this comes from
61 scanned repositories with at least a fifth of their prompts in Markdown and docs
freeCodeCamp/freeCodeCamp6 · EbookFoundation/free-programming-books0 · kamranahmedse/developer-roadmap2 · ossu/computer-science0 · avelino/awesome-go1 · iptv-org/iptv3 · 30-seconds/30-seconds-of-code4 · electron/electron5 · nodejs/node8 · langflow-ai/langflow14 · angular/angular4 · mui/material-ui6 · ant-design/ant-design6 · neovim/neovim2 · fastapi/fastapi7 · django/django6 · sveltejs/svelte5 · microsoft/playwright4 · vitejs/vite5 · elastic/elasticsearch1 · astral-sh/uv11 · prometheus/prometheus10 · nuxt/nuxt8 · rails/rails1 · warpdotdev/warp6 · traefik/traefik10 · bmad-code-org/bmad-method7 · prettier/prettier6 · tanstack/query4 · serverless/serverless6 · colinhacks/zod4 · astral-sh/ruff20 · helix-editor/helix7 · logseq/logseq5 · gofiber/fiber6 · vlang/v2 · vadimdemedes/ink3 · BerriAI/litellm24 · vercel-labs/agent-skills0 · opentofu/opentofu5 · anthropics/claude-code1 · pydantic/pydantic14 · QwenLM/Qwen30 · Tencent/ncnn3 · jj-vcs/jj9 · github/docs6 · argoproj/argo-cd11 · apache/apisix3 · SWE-agent/SWE-agent6 · astral-sh/ty10 · TanStack/router6 · awslabs/mcp12 · tensorflow/swift0 · Azure/azure-sdk-for-net4 · volcano-sh/volcano3 · Azure/azure-powershell1 · awslabs/aidlc-workflows6 · google-gemini/gemini-skills0 · cloudflare/workers-sdk5 · open-telemetry/opentelemetry-python9 · getsentry/sentry-php0