ai-driven-development

mcp
Security Audit
Fail
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 36 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in hooks/optimal-safety-hooks/src/testdata/fixtures/bash_dash_c_rm_rf_etc.json
  • rm -rf — Recursive force deletion command in hooks/optimal-safety-hooks/src/testdata/fixtures/chroot_rm_etc.json
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This tool is a collection of 18 skills and 1 Bash safety hook designed to standardize practices for AI-driven software development. It acts as an integration layer to help manage settings, subagents, and configurations across multiple AI coding agents.

Security Assessment
Overall Risk: Low. The tool does not request inherently dangerous permissions, expose hardcoded secrets, or make suspicious network requests. However, the automated rule-based scan flagged two files containing recursive force deletion commands (`rm -rf`). Because these files are located strictly within the test fixtures directory (`testdata/fixtures/`), they are completely harmless and used exclusively to test the included Bash safety hook. The tool does not access sensitive user data or execute hidden shell commands outside of its explicitly stated configuration management functions.

Quality Assessment
Overall Quality: Good. The project is actively maintained, with its most recent push occurring just today. It uses the highly permissive MIT license and has a clear, well-documented description. With 36 GitHub stars, it demonstrates early but promising community trust and adoption.

Verdict
Safe to use.
SUMMARY

Practices, protocols, and skills for AI-driven software development. 18 skills + 1 Bash safety hook for Claude Code, Codex CLI, OpenCode, Cursor, Gemini CLI, Antigravity, and any agent supporting the Agent Skills standard.

README.md

Agent Skills Collection 18 Skills 1 Hook 12+ Agents MIT License

AI-Driven Development

Practices, protocols, and skills for AI-driven software development

An umbrella collection of 18 skills + 1 hook that work across Claude Code, Codex CLI, OpenCode, Cursor, Gemini CLI, Antigravity, and any other agent that supports the Agent Skills standard.


Installation

Via Skills CLI (recommended — works in 12+ agents):

# Install all 18 skills
npx skills add CodeAlive-AI/ai-driven-development

# Or pick a single skill
npx skills add CodeAlive-AI/ai-driven-development --skill prompt-engineering

Via Claude Code plugin marketplace:

/plugin marketplace add CodeAlive-AI/ai-driven-development
/plugin install ai-driven-development@ai-driven-development
# Restart Claude Code for changes to take effect

The Bash safety hook (bash-guard) ships separately — see hooks/optimal-safety-hooks/ for its install one-liner.


What's Included

Agent reflection & meta (7)

Meta-skills that let AI coding agents configure themselves. No more editing config files — just tell your agent what you need.

Skill What It Does
mcp-management Install and manage MCP servers across 10+ coding agents (Claude Code, Cursor, VS Code, Gemini CLI, Codex, Goose, Copilot CLI, OpenCode, Zed) — single command, handles JSON/YAML/TOML config differences
hooks-management Manage hooks and automation for Claude Code, Codex CLI, and OpenCode
settings-management Configure settings for Claude Code (JSON), Codex CLI (TOML), and OpenCode (JSON/JSONC)
subagents-management Create and manage subagents across Claude Code, Codex CLI, and OpenCode
skills-management Organise, discover, and share skills for coding agents
plugins-management Package and publish plugins for Claude Code and OpenCode (validate, scaffold, submit to Anthropic's directory)
optimizing-claude-code Audit repos and optimise CLAUDE.md for agent work

Engineering practices (3)

Disciplined approaches that improve how agents and humans collaborate on code.

Skill What It Does
prompt-engineering Universal prompt-engineering toolkit. 14 reference docs covering Claude / GPT / Gemini family-specific guidance, prompting techniques, evaluation & red-teaming, common failure modes (hallucinations, security, structure, debt)
fpf-problem-solving First Principles Framework — a transdisciplinary "operating system for thought". Decompose cross-domain problems, audit conclusions, and reason rigorously about complex systems. Based on Anatoly Levenchuk's FPF
bug-fix-protocol 8-step bug-fix protocol. Treats every production bug as two failures (the code defect + the testing system that allowed it through) and enforces a step-8 audit that closes the gap

Research & docs (3)

Skill What It Does
semantic-scholar-deep Deep research over the Semantic Scholar Graph API — backward references, recommendations, batch lookup (up to 500 IDs), multi-hop citation-graph BFS, snippet search. Ships with an optional paired subagent for token-isolated literature reviews
fetch-url-as-markdown URL → clean Markdown via local trafilatura (real-browser UA, anti-stub guards, structured exit codes), with Exa MCP as a fallback for JS-rendered or anti-bot pages. Drop-in replacement for built-in WebFetch
ubiquitous-language Domain thesaurus manager — DDD naming consistency, thesaurus generation, naming audit

Multi-agent orchestration (1)

Skill What It Does
agents-consilium Query Codex CLI and Gemini CLI in parallel for independent expert opinions on architecture, code reviews, and investigations. Different models bring different angles: more original ideas in brainstorming, broader coverage in code review

macOS & system health (1)

Skill What It Does
maintaining-macos-health Disk cleanup + dev-machine optimisation + proactive health alerting. Triage flow for kernel panic / watchdog timeout / vm-compressor-space-shortage / Jetsam events. Tiered cleanup playbook (zero-risk → discuss-first), Mole-style safety guards, and a noise-resistant LaunchAgent alerter (3 CRITICAL-only triggers, hysteresis, calibration window). Apple Silicon focus

Niche utilities (3)

Skill What It Does
clipboard Copy text to macOS clipboard with optional rich formatting (HTML + plain text). Slack/LinkedIn-aware — uses HTML rich text instead of mrkdwn, and warns about <table> not rendering in chat targets
repo-explorer Explores repositories by delegating to Claude Code CLI. Saves context for the calling agent and speeds up codebase understanding
windows-qa-engineer Manual QA copilot for Windows 11 desktop apps (WinForms / WPF / UWP). Uses Microsoft UFO (UIA / Win32) + FastMCP mount() composition + MCP protocol

Hooks (1)

Standalone agent-safety tooling that doesn't fit the skill format — typically because it has to live inside an agent's hook protocol or run as a compiled binary.

Hook What It Does Install
optimal-safety-hooks bash-guard — Claude Code PreToolUse:Bash safety hook in Go. Real Bash AST parsing via mvdan.cc/sh (heredocs, single-quoted prose, sudo/env/xargs/bash -c/eval/ssh/pipe-to-shell). Catastrophic-path matrix with safe-path carve-outs. Default rule set uses ask, not deny — agents trivially bypass deny by rephrasing. Covers rm/unlink/shred, ORM migrations, infra (kubectl/gcloud/helm/docker/terraform/git push -f), PaaS CLIs (railway/fly/heroku), DB clients (psql/redis-cli), and cloud control-plane API mutations curl -fsSL https://raw.githubusercontent.com/CodeAlive-AI/ai-driven-development/main/hooks/optimal-safety-hooks/install-prebuilt.sh | sh

Working principles

This collection is built on four principles that show up across all skills:

  1. Cross-agent first. Skills follow the Agent Skills open standard so they work in Claude Code, Cursor, Codex, Gemini, OpenCode, Antigravity, Copilot CLI — anywhere npx skills add reaches.
  2. Low false-positive friction. Tools that interrupt your workflow (the bash-guard hook, agent prompts) are tuned for high signal: only ask when the action is genuinely destructive, not when there's a fuzzy keyword match.
  3. Disciplined defaults. Skills like bug-fix-protocol and fpf-problem-solving codify practices that pay off when the agent goes off the happy path — multi-step protocols rather than one-shot prompts.
  4. Token-cheap. Skill descriptions are kept tight so they don't dominate context. The semantic-scholar-deep skill goes further with an optional paired subagent for token-isolated research.

Repository structure

ai-driven-development/
├── .claude-plugin/
│   ├── marketplace.json         ← lists this repo as a single plugin (source: "./")
│   └── plugin.json               ← umbrella plugin manifest
├── skills/                       ← canonical agent-skills layout
│   ├── agents-consilium/
│   ├── bug-fix-protocol/
│   ├── clipboard/
│   ├── fetch-url-as-markdown/
│   ├── fpf-problem-solving/
│   ├── hooks-management/
│   ├── maintaining-macos-health/
│   ├── mcp-management/
│   ├── optimizing-claude-code/
│   ├── plugins-management/
│   ├── prompt-engineering/
│   ├── repo-explorer/
│   ├── semantic-scholar-deep/
│   ├── settings-management/
│   ├── skills-management/
│   ├── subagents-management/
│   ├── ubiquitous-language/
│   └── windows-qa-engineer/
├── hooks/
│   └── optimal-safety-hooks/    ← bash-guard (Go, pre-built binaries via release)
├── README.md (+ ru/zh/pt-BR translations)
├── CLAUDE.md
└── LICENSE

The same skills/ directory is read by both npx skills add (the cross-agent CLI) and Claude Code's plugin install — no symlinks, no duplication. The .claude-plugin/marketplace.json declares this repo itself as a single plugin via source: "./".


Contributing

Each skill lives in skills/<skill-name>/ with a SKILL.md (agent-facing contract) and an optional README.md (human-facing entry). Most skills also have references/, scripts/, or assets/ directories for supporting material.

When adding a skill or materially changing one, refresh:

  • The skill's own SKILL.md and README.md
  • The relevant section table above
  • .claude-plugin/plugin.json and .claude-plugin/marketplace.json version (semver — minor bump for new skills, major for breaking interface changes)

See CLAUDE.md for the full development guide.


Heritage

This collection is the consolidation of nine previously-separate CodeAlive-AI repositories:

  • agents-reflection-skills (the 7 meta-skills, the marketplace base)
  • prompt-engineering-skill
  • fpf-problem-solving-skill
  • clipboard-skill
  • claude-repo-explorer-skill
  • windows-qa-engineer-skill
  • ai-driven-development (the original — bug-fix protocol)
  • awesome-agent-skills (5 skills + the bash-guard hook)

The 7 meta-skills' commit history lives on in this repo (consolidated via git mv). The other source repos retain their own histories at their original URLs and will be archived with pointer READMEs shortly.


License

MIT

Reviews (0)

No results found