beads-superpowers
Health Warn
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 5 GitHub stars
Code Fail
- rm -rf — Recursive force deletion command in install.sh
Permissions Pass
- Permissions — No dangerous permissions requested
This plugin provides 20 skills for AI coding agents—such as TDD, debugging, and code review—by merging process discipline with a persistent, cross-session issue tracker. It is designed primarily for Claude Code.
Security Assessment
The tool requires executing shell commands, notably through its `curl | bash` installation method and an `install.sh` script that includes a `rm -rf` recursive force deletion command. While no hardcoded secrets or dangerous OAuth permissions were found, the presence of `rm -rf` in installation scripts is a standard security red flag that could accidentally delete user data if the script behaves unexpectedly. Overall risk is rated as Medium.
Quality Assessment
The project uses the permissive MIT license and was updated very recently (within the last day), indicating active maintenance. However, it suffers from extremely low community visibility, having only 5 GitHub stars. Consequently, the codebase has undergone minimal public scrutiny. Because it involves downloading and executing remote shell scripts to integrate deeply with local development environments, the lack of broader community testing and peer review is a notable concern.
Verdict
Use with caution: while the project is actively maintained and openly licensed, the low community trust and the inclusion of `rm -rf` in the installation script warrant a careful manual review of the shell code before installing it on your system.
Claude Code plugin: 20 skills for AI coding agents — TDD, debugging, task tracking, code review
Process discipline and persistent memory for AI coding agents.
Try it in 60 seconds
Option A: Claude Code Marketplace (recommended)
claude plugin marketplace add DollarDill/beads-superpowers
claude plugin install beads-superpowers@beads-superpowers-marketplace
Option B: npx (via Vercel Skills CLI)
npx skills add DollarDill/beads-superpowers --all -y -g
After installing, tell Claude: "Run the setup skill" — this configures the SessionStart hook that makes skills activate automatically.
Option C: curl (one command, no dependencies)
curl -fsSL https://raw.githubusercontent.com/DollarDill/beads-superpowers/main/install.sh | bash
Installs 20 skills to ~/.claude/skills/ and configures the SessionStart hook automatically. Supports --yes (CI mode), --version X.Y.Z, --dry-run, and --uninstall. See install.sh for details.
Then, in any project
cd your-project
bd init
In Claude Code, run /skills to verify — you should see 20 skills available.
bd setup claude
The plugin's SessionStart hook already runs bd prime. Remove the duplicate hooks:
bd setup claude --remove
Why it exists
AI coding agents have two recurring failure modes:
- No process discipline. They skip tests, rush to code, and claim work is done without verification.
- No persistent memory. Todo lists vanish when a session ends. The next session starts blind.
beads-superpowers merges two upstream systems to solve both at once:
- Superpowers by Jesse Vincent — 20 mandatory skills enforcing TDD, brainstorming, systematic debugging, and two-stage code review.
- Beads by Steve Yegge — a Dolt-backed issue tracker that survives across sessions, agents, and projects.
The result: skills that don't just tell agents how to work — they give agents a persistent ledger to track what they're working on.
How it works
Session Start
│
▼
SessionStart hook fires automatically
├── Injects using-superpowers skill (skill routing + beads awareness)
└── Runs bd prime (beads CLI context + persistent memories)
│
▼
Agent receives task from user
│
▼
Skill system activates
├── brainstorming → design spec → user approval
├── writing-plans → implementation plan → beads created for each task
├── subagent-driven-development → execute tasks → two-stage review
│ └── Per task: bd create → bd update --claim → implement → bd close
└── finishing-a-development-branch → merge/PR → Land the Plane
│
▼
Land the Plane (mandatory session close)
├── bd close <completed-beads> --reason "description"
├── bd dolt push (sync beads to Dolt remote)
├── git push (sync code to remote)
└── git status (verify clean state)
The using-superpowers skill (loaded at every session start) enforces:
IF A SKILL APPLIES TO YOUR TASK, YOU DO NOT HAVE A CHOICE. YOU MUST USE IT.
Skills are not suggestions. They use bright-line rules, anti-rationalization tables, and empirically-tested enforcement language. See docs/METHODOLOGY.md for the research basis.
Skills reference
| Skill | Category | When to use |
|---|---|---|
| using-superpowers | Meta | Every session start — routes to the right skill |
| brainstorming | Design | Before any creative work — explores design before code |
| writing-plans | Planning | After design approval — creates bite-sized task plans |
| subagent-driven-development | Execution | Execute plans with fresh subagent per task + two-stage review |
| executing-plans | Execution | Execute plans in a single session with checkpoints |
| test-driven-development | Quality | Any feature or bugfix — RED-GREEN-REFACTOR cycle |
| systematic-debugging | Quality | Any bug or test failure — 4-phase root cause analysis |
| verification-before-completion | Quality | Before any "done" claim — evidence before assertions |
| requesting-code-review | Review | After implementation — dispatches code reviewer |
| receiving-code-review | Review | When receiving feedback — anti-sycophancy review reception |
| using-git-worktrees | Infrastructure | Isolated development branches with safety checks |
| finishing-a-development-branch | Infrastructure | Merge/PR decision tree + Land the Plane protocol |
| dispatching-parallel-agents | Advanced | 2+ independent tasks without shared state |
| writing-skills | Meta | Creating or modifying skills — TDD for process docs |
| document-release | Quality | Post-ship documentation audit — syncs docs to match shipped code |
| project-init | Infrastructure | Beads/Dolt DB setup, bootstrap, and recovery |
| stress-test | Design | Adversarial interrogation of designs/plans with recommended answers |
| setup | Infrastructure | Post-npx hook installation — configures SessionStart for skills auto-activation |
| auditing-upstream-drift | Meta | Periodic audit for staleness vs upstream superpowers and beads |
| getting-up-to-speed | Meta | Start of session or post-compaction — runs bd commands, deep-dives the codebase, produces a structured current-state summary |
Beads commands used in skills
| Action | Command | Used in |
|---|---|---|
| Create epic | bd create "Epic: name" -t epic |
subagent-driven-dev, executing-plans |
| Create task | bd create "Task: name" -t task --parent <epic> |
subagent-driven-dev, executing-plans |
| Claim work | bd update <id> --claim |
executing-plans |
| Complete work | bd close <id> --reason "description" |
all execution skills |
| Check remaining | bd ready --parent <epic> |
subagent-driven-dev, executing-plans |
| Add dependency | bd dep add <child> <parent> |
subagent-driven-dev, writing-plans |
| Store learning | bd remember "insight" |
any session |
| Sync to remote | bd dolt push |
finishing-a-development-branch |
| Session context | bd prime |
SessionStart hook (automatic) |
Architecture
flowchart TB
User[User prompt] --> Orchestrator
subgraph Orchestrator [Main Agent — orchestrator-only beads]
SP[using-superpowers skill]
BD[bd prime — beads context]
SP --> Routing{Route to skill}
BD --> Routing
end
Routing -->|design| Brainstorm[brainstorming]
Routing -->|plan| WP[writing-plans]
Routing -->|execute| SDD[subagent-driven-development]
Routing -->|debug| Debug[systematic-debugging]
SDD --> Sub1[Subagent 1: Task A]
SDD --> Sub2[Subagent 2: Task B]
Sub1 -->|results| Review[Two-stage review]
Sub2 -->|results| Review
Review --> Close[bd close + bd dolt push]
Close --> Land[Land the Plane: git push]
The orchestrator is the only agent that touches beads. Subagents focus on implementation and have no concurrent bead-conflict surface. The two-stage review catches both spec deviation (first-stage spec reviewer) and code-quality issues (second-stage code reviewer) before any task is marked complete.
Design decisions
| Decision | Rationale |
|---|---|
| Orchestrator-only beads | Only the main agent manages beads. Subagents focus on implementation — no concurrent bead conflicts. |
| Plugin subsumes bd hooks | The plugin's SessionStart hook runs bd prime itself. No need for separate bd setup claude hooks. |
| TodoWrite fully replaced | Every TodoWrite reference is replaced with bd commands. Zero active TodoWrite usage. |
| Land the Plane in finishing skill | Session close protocol lives in the terminal skill, not a separate skill. Every pipeline path ends here. |
| Skills are Markdown, not code | Pure documentation — no build step, no dependencies, works on any platform with a file system. |
Project structure
beads-superpowers/
├── .claude-plugin/ Plugin manifests (auto-discovered by Claude Code)
├── .github/ CI workflow, Dependabot, issue/PR templates
├── assets/ README banner SVG
├── hooks/ SessionStart hook (bash + Windows polyglot wrapper)
├── skills/ 20 beads-native skills
├── agents/ code-reviewer agent
├── commands/ Deprecated slash commands (will be removed in a future version)
├── docs/ METHODOLOGY, SETUP-GUIDE, testing, upstream-reference
├── tests/ Test infrastructure (5 suites)
├── scripts/ bump-version.sh
├── CHANGELOG.md
├── CLAUDE.md Plugin development instructions
├── AGENTS.md Agent instructions
├── CONTRIBUTING.md How to contribute
├── SECURITY.md Vulnerability reporting policy
├── LICENSE MIT
└── README.md This file
For a deeper directory listing, see docs/SETUP-GUIDE.md.
Development
When you edit skills in this repo, the installed plugin cache goes stale. The simplest fix is a one-time symlink:
rm -rf ~/.claude/plugins/cache/beads-superpowers-marketplace/beads-superpowers/0.4.1
ln -s ~/workplace/beads-superpowers \
~/.claude/plugins/cache/beads-superpowers-marketplace/beads-superpowers/0.4.1
Verify sync:
diff -rq skills/ ~/.claude/plugins/cache/beads-superpowers-marketplace/beads-superpowers/0.4.1/skills/
claude plugin updateexists but has a cache invalidation bug. Use the symlink approach instead.
For the full contributor guide, see CONTRIBUTING.md.
Attribution
- Superpowers skills — obra/superpowers by Jesse Vincent (MIT License)
- Beads issue tracker — gastownhall/beads by Steve Yegge (MIT License)
- beads-superpowers integration — Dillon Frawley
License
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found