beads-superpowers

agent
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Basarisiz
  • rm -rf — Recursive force deletion command in install.sh
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This plugin provides 20 skills for AI coding agents—such as TDD, debugging, and code review—by merging process discipline with a persistent, cross-session issue tracker. It is designed primarily for Claude Code.

Security Assessment
The tool requires executing shell commands, notably through its `curl | bash` installation method and an `install.sh` script that includes a `rm -rf` recursive force deletion command. While no hardcoded secrets or dangerous OAuth permissions were found, the presence of `rm -rf` in installation scripts is a standard security red flag that could accidentally delete user data if the script behaves unexpectedly. Overall risk is rated as Medium.

Quality Assessment
The project uses the permissive MIT license and was updated very recently (within the last day), indicating active maintenance. However, it suffers from extremely low community visibility, having only 5 GitHub stars. Consequently, the codebase has undergone minimal public scrutiny. Because it involves downloading and executing remote shell scripts to integrate deeply with local development environments, the lack of broader community testing and peer review is a notable concern.

Verdict
Use with caution: while the project is actively maintained and openly licensed, the low community trust and the inclusion of `rm -rf` in the installation script warrant a careful manual review of the shell code before installing it on your system.
SUMMARY

Claude Code plugin: 20 skills for AI coding agents — TDD, debugging, task tracking, code review

README.md

beads-superpowers — Process discipline and persistent memory for AI coding agents

Process discipline and persistent memory for AI coding agents.

License: MIT Plugin version Release GitHub stars


Try it in 60 seconds

Option A: Claude Code Marketplace (recommended)

claude plugin marketplace add DollarDill/beads-superpowers
claude plugin install beads-superpowers@beads-superpowers-marketplace

Option B: npx (via Vercel Skills CLI)

npx skills add DollarDill/beads-superpowers --all -y -g

After installing, tell Claude: "Run the setup skill" — this configures the SessionStart hook that makes skills activate automatically.

Option C: curl (one command, no dependencies)

curl -fsSL https://raw.githubusercontent.com/DollarDill/beads-superpowers/main/install.sh | bash

Installs 20 skills to ~/.claude/skills/ and configures the SessionStart hook automatically. Supports --yes (CI mode), --version X.Y.Z, --dry-run, and --uninstall. See install.sh for details.

Then, in any project

cd your-project
bd init

In Claude Code, run /skills to verify — you should see 20 skills available.

If you previously ran bd setup claude

The plugin's SessionStart hook already runs bd prime. Remove the duplicate hooks:

bd setup claude --remove

Why it exists

AI coding agents have two recurring failure modes:

  1. No process discipline. They skip tests, rush to code, and claim work is done without verification.
  2. No persistent memory. Todo lists vanish when a session ends. The next session starts blind.

beads-superpowers merges two upstream systems to solve both at once:

  • Superpowers by Jesse Vincent — 20 mandatory skills enforcing TDD, brainstorming, systematic debugging, and two-stage code review.
  • Beads by Steve Yegge — a Dolt-backed issue tracker that survives across sessions, agents, and projects.

The result: skills that don't just tell agents how to work — they give agents a persistent ledger to track what they're working on.

How it works

Session Start
  │
  ▼
SessionStart hook fires automatically
  ├── Injects using-superpowers skill (skill routing + beads awareness)
  └── Runs bd prime (beads CLI context + persistent memories)
  │
  ▼
Agent receives task from user
  │
  ▼
Skill system activates
  ├── brainstorming → design spec → user approval
  ├── writing-plans → implementation plan → beads created for each task
  ├── subagent-driven-development → execute tasks → two-stage review
  │     └── Per task: bd create → bd update --claim → implement → bd close
  └── finishing-a-development-branch → merge/PR → Land the Plane
  │
  ▼
Land the Plane (mandatory session close)
  ├── bd close <completed-beads> --reason "description"
  ├── bd dolt push (sync beads to Dolt remote)
  ├── git push (sync code to remote)
  └── git status (verify clean state)

The using-superpowers skill (loaded at every session start) enforces:

IF A SKILL APPLIES TO YOUR TASK, YOU DO NOT HAVE A CHOICE. YOU MUST USE IT.

Skills are not suggestions. They use bright-line rules, anti-rationalization tables, and empirically-tested enforcement language. See docs/METHODOLOGY.md for the research basis.

Skills reference

Skill Category When to use
using-superpowers Meta Every session start — routes to the right skill
brainstorming Design Before any creative work — explores design before code
writing-plans Planning After design approval — creates bite-sized task plans
subagent-driven-development Execution Execute plans with fresh subagent per task + two-stage review
executing-plans Execution Execute plans in a single session with checkpoints
test-driven-development Quality Any feature or bugfix — RED-GREEN-REFACTOR cycle
systematic-debugging Quality Any bug or test failure — 4-phase root cause analysis
verification-before-completion Quality Before any "done" claim — evidence before assertions
requesting-code-review Review After implementation — dispatches code reviewer
receiving-code-review Review When receiving feedback — anti-sycophancy review reception
using-git-worktrees Infrastructure Isolated development branches with safety checks
finishing-a-development-branch Infrastructure Merge/PR decision tree + Land the Plane protocol
dispatching-parallel-agents Advanced 2+ independent tasks without shared state
writing-skills Meta Creating or modifying skills — TDD for process docs
document-release Quality Post-ship documentation audit — syncs docs to match shipped code
project-init Infrastructure Beads/Dolt DB setup, bootstrap, and recovery
stress-test Design Adversarial interrogation of designs/plans with recommended answers
setup Infrastructure Post-npx hook installation — configures SessionStart for skills auto-activation
auditing-upstream-drift Meta Periodic audit for staleness vs upstream superpowers and beads
getting-up-to-speed Meta Start of session or post-compaction — runs bd commands, deep-dives the codebase, produces a structured current-state summary

Beads commands used in skills

Action Command Used in
Create epic bd create "Epic: name" -t epic subagent-driven-dev, executing-plans
Create task bd create "Task: name" -t task --parent <epic> subagent-driven-dev, executing-plans
Claim work bd update <id> --claim executing-plans
Complete work bd close <id> --reason "description" all execution skills
Check remaining bd ready --parent <epic> subagent-driven-dev, executing-plans
Add dependency bd dep add <child> <parent> subagent-driven-dev, writing-plans
Store learning bd remember "insight" any session
Sync to remote bd dolt push finishing-a-development-branch
Session context bd prime SessionStart hook (automatic)

Architecture

flowchart TB
    User[User prompt] --> Orchestrator
    subgraph Orchestrator [Main Agent — orchestrator-only beads]
        SP[using-superpowers skill]
        BD[bd prime — beads context]
        SP --> Routing{Route to skill}
        BD --> Routing
    end
    Routing -->|design| Brainstorm[brainstorming]
    Routing -->|plan| WP[writing-plans]
    Routing -->|execute| SDD[subagent-driven-development]
    Routing -->|debug| Debug[systematic-debugging]
    SDD --> Sub1[Subagent 1: Task A]
    SDD --> Sub2[Subagent 2: Task B]
    Sub1 -->|results| Review[Two-stage review]
    Sub2 -->|results| Review
    Review --> Close[bd close + bd dolt push]
    Close --> Land[Land the Plane: git push]

The orchestrator is the only agent that touches beads. Subagents focus on implementation and have no concurrent bead-conflict surface. The two-stage review catches both spec deviation (first-stage spec reviewer) and code-quality issues (second-stage code reviewer) before any task is marked complete.

Design decisions

Decision Rationale
Orchestrator-only beads Only the main agent manages beads. Subagents focus on implementation — no concurrent bead conflicts.
Plugin subsumes bd hooks The plugin's SessionStart hook runs bd prime itself. No need for separate bd setup claude hooks.
TodoWrite fully replaced Every TodoWrite reference is replaced with bd commands. Zero active TodoWrite usage.
Land the Plane in finishing skill Session close protocol lives in the terminal skill, not a separate skill. Every pipeline path ends here.
Skills are Markdown, not code Pure documentation — no build step, no dependencies, works on any platform with a file system.

Project structure

beads-superpowers/
├── .claude-plugin/         Plugin manifests (auto-discovered by Claude Code)
├── .github/                CI workflow, Dependabot, issue/PR templates
├── assets/                 README banner SVG
├── hooks/                  SessionStart hook (bash + Windows polyglot wrapper)
├── skills/                 20 beads-native skills
├── agents/                 code-reviewer agent
├── commands/               Deprecated slash commands (will be removed in a future version)
├── docs/                   METHODOLOGY, SETUP-GUIDE, testing, upstream-reference
├── tests/                  Test infrastructure (5 suites)
├── scripts/                bump-version.sh
├── CHANGELOG.md
├── CLAUDE.md               Plugin development instructions
├── AGENTS.md               Agent instructions
├── CONTRIBUTING.md         How to contribute
├── SECURITY.md             Vulnerability reporting policy
├── LICENSE                 MIT
└── README.md               This file

For a deeper directory listing, see docs/SETUP-GUIDE.md.

Development

When you edit skills in this repo, the installed plugin cache goes stale. The simplest fix is a one-time symlink:

rm -rf ~/.claude/plugins/cache/beads-superpowers-marketplace/beads-superpowers/0.4.1
ln -s ~/workplace/beads-superpowers \
  ~/.claude/plugins/cache/beads-superpowers-marketplace/beads-superpowers/0.4.1

Verify sync:

diff -rq skills/ ~/.claude/plugins/cache/beads-superpowers-marketplace/beads-superpowers/0.4.1/skills/

claude plugin update exists but has a cache invalidation bug. Use the symlink approach instead.

For the full contributor guide, see CONTRIBUTING.md.

Attribution

  • Superpowers skillsobra/superpowers by Jesse Vincent (MIT License)
  • Beads issue trackergastownhall/beads by Steve Yegge (MIT License)
  • beads-superpowers integration — Dillon Frawley

License

MIT

Yorumlar (0)

Sonuc bulunamadi