claude-craft

agent
Security Audit
Fail
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 96 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in .bmad/lib/batch-executor.sh
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This framework supercharges Claude Code by installing a comprehensive set of standardized rules, specialized agents, and commands designed to streamline AI-assisted development across 19 different technology stacks.

Security Assessment
The overall risk is rated as Medium. The tool relies heavily on Shell scripts to execute its batch operations. A rule-based scan flagged the presence of a recursive force deletion command (`rm -rf`) within the `.bmad/lib/batch-executor.sh` file. While this is common in automation scripts, it poses a risk of accidental local data deletion if the script behaves unexpectedly or is modified maliciously. The tool does not request explicitly dangerous elevated permissions. The repository is mindful of security, as evidenced by recent updates addressing a critical vulnerability (CVE-2025-59536) and moving specific dependencies out of production. However, as an agentic framework, it inherently executes shell commands and interacts with your local file system, requiring users to trust the installed agents.

Quality Assessment
The project demonstrates excellent maintenance and vitality. It is actively updated, with the most recent push occurring today. It utilizes the permissive MIT license, making it safe for most commercial and personal projects. Furthermore, it has garnered 96 GitHub stars, indicating a solid level of community trust and adoption for an early-stage open-source framework. The recent v8.3 updates focusing on token optimization and dependency trimming show a commitment to efficient, production-ready code.

Verdict
Use with caution — while the project is actively maintained, properly licensed, and security-conscious, developers should review the shell scripts (specifically `batch-executor.sh`) to ensure local file safety before deploying.
SUMMARY

Supercharge Claude Code with Expert Knowledge A comprehensive framework for AI-assisted development. Install standardized rules, agents, and commands for your projects across multiple technology stacks.

README.md

Claude Craft — Sprint workflow, multi-stack reviewers, and browser QA for Claude Code teams

The most complete framework for tech leads adopting Claude Code with their team — 19 stacks, 5 languages, BMAD v6 sprint lifecycle, browser-based acceptance testing.

npm version
npm downloads
Claude Code 2.1.97+
CI
License: MIT

A comprehensive framework for AI-assisted development with Claude Code. Install standardized rules, agents, and commands for your projects across multiple technology stacks — 72 specialized agents, 211 commands, 48 skills, all token-optimized via context: fork and sub-agent model routing.

What's New in v8.3 (Audit-driven release: tokens + security)

  • Dependabot config fix (v8.3.1) -- removed two erroneous ecosystems (/cli/kanban/client and docker /) introduced in v8.3.0 that caused Dependabot run failures
  • Token optimization via context: fork (v8.3.0) -- 15 heavy skills (>100 lines) now run in isolated contexts (Claude Code v2.1.105+), saving 8-15K tokens per long session
  • CHANGELOG truncated (v8.3.0) -- 117 KB → 67 KB shipped, archive moved to docs/CHANGELOG-archive.md
  • Production deps trimmed (v8.3.0) -- cytoscape, cytoscape-dagre, dompurify, uplot moved to devDependencies (-3 MB prod install)
  • Min Claude Code raised to 2.1.97 (v8.3.0) -- CVE-2025-59536 (CVSS 8.7, RCE + token exfiltration) cumulative hardening
  • plugin.json schema v8.3 (v8.3.0) -- accurate counts (72/211/48), marketplace-ready, was stale at v7.6.1
  • Hook templates documentation (v8.3.0) -- 9 templates documented with Token Optimization Stack recipe (55-65% reduction)

What's New in v8.2 (Claude Code 2.1.117 + Opus 4.7)

  • Opus 4.7 as default flagship (v8.2.2) -- model ID claude-opus-4-7, 1M context GA (no pricing premium), new xhigh effort level, adaptive thinking only (extended thinking removed), same $5/$25 per M tokens as Opus 4.6
  • Claude Code 2.1.117 recommended (v8.2.2) -- new commands /btw, /hooks, /reload-plugins, /proactive, /ultrareview, /tui, /recap, /undo, /effort slider, native CLI binary (v2.1.113), forked subagents (CLAUDE_CODE_FORK_SUBAGENT=1, v2.1.117), prompt caching env vars (ENABLE_PROMPT_CACHING_1H, v2.1.108)
  • Fast Mode preserved on Opus 4.6 -- /fast reste Opus 4.6 exclusif (2.5x speed, 6x cost). Opus 4.7 n'a pas de Fast Mode.
  • Node.js 22 LTS migration (v8.2.1) -- CI workflows migrés, élimine les deprecation warnings GitHub Actions (Node 20 EOL avril 2026). Minimum utilisateur reste Node.js 20+.
  • CI repair (v8.2.3) -- Deploy Documentation (Playwright strict mode), Generate SBOM (migration vers @cyclonedx/cyclonedx-npm CLI), SLSA workflow retiré (redondant avec npm publish --provenance).
  • Documentation sync (v8.2.4) -- formations claude-code + claude-craft, settings sub-agent model, README, CLI-REFERENCE.md alignés sur l'écosystème actuel.
  • See CHANGELOG and .claude/COMPATIBILITY.md for full details

Install and First Result

# Install to your project (picks your tech stack interactively)
npx @the-bearded-bear/claude-craft

# Or install directly
npx @the-bearded-bear/claude-craft install ~/my-project --tech=react --lang=en

# Open Claude Code and run your first audit
claude
/team:audit

That's it. You get an architecture, security, and quality audit of your project in minutes.

New to Claude Craft? Run /getting-started in Claude Code for a 10-minute guided tour that shows you the 3 most valuable commands for YOUR project.

See Quickstart for a step-by-step walkthrough with expected output at each stage.

Why Claude Craft?

Claude Code is powerful on its own. Claude Craft makes it consistent and team-ready:

  • Standardized rules -- SOLID, Clean Architecture, TDD enforced across your team, not just suggested
  • 72 specialized agents -- reviewers, architects, coaches that know your stack deeply
  • 211 slash commands -- repeatable workflows for audits, code generation, sprint management
  • Quality gates -- automated checks at every stage from PRD to deployment
  • 5 languages -- English, French, Spanish, German, Portuguese

Supported Technologies

Stack Version Install Command
Symfony / PHP 8.0 / PHP 8.5 --tech=symfony
React 19.x --tech=react
Flutter / Dart 3.38 / Dart 3.10 --tech=flutter
Python 3.13+ / FastAPI --tech=python
Angular 19.x --tech=angular
Vue.js 3.5+ --tech=vuejs
React Native 0.76+ --tech=reactnative
C# / .NET 10 LTS / C# 14 --tech=csharp
Laravel 12.x / PHP 8.5 --tech=laravel
PHP 8.5 --tech=php
Paperclip 2026.403.0 --tech=paperclip

| Docker | 27+ | --tech=docker |
| Coolify | 4.x | --tech=coolify |
| Kubernetes | 1.35+ | --tech=kubernetes |
| OpenTofu | 1.7+ | --tech=opentofu |
| Ansible | 2.18+ | --tech=ansible |
| Hcloud | 1.61+ | --tech=hcloud |
| PgBouncer | 1.25+ | --tech=pgbouncer |
| FrankenPHP | 1.11+ | --tech=frankenphp |

See Technologies for full details.

What's Included

Category Count Examples
Agents 63 @tdd-coach, @api-designer, @symfony-reviewer, @kubernetes-architect, @hcloud-architect
Commands 204 /workflow:init, /team:audit, /react:generate-component
Skills 37 Architecture, testing, security best practices
Templates 21 Code generation patterns, BMAD project templates
Checklists 10 Commit, feature, release quality gates

See Agents | Commands | Skills

Workflow Tracks

Claude Craft adapts to your project complexity with three development tracks:

Track Setup Phases Best For
Quick Flow < 5 min Implementation only Bug fixes, hotfixes
Standard < 15 min Plan > Design > Implement New features, refactoring
Enterprise < 30 min Analyze > Plan > Design > Implement Platforms, migrations
/workflow:init              # Auto-detects complexity
/workflow:init --quick      # Bug fix mode
/workflow:init --enterprise # Full methodology

See BMAD Practical Guide for the complete project management framework.

Key Commands

These are the commands you'll use most:

Command What It Does
/workflow:init Start a development workflow (auto-detects track)
/team:audit Full project audit (architecture, security, quality)
/common:pre-commit-check Validate before committing
/sprint:next-story Get next story ready for development
/qa:tdd Test-Driven Development flow
/gate:validate-story Check story meets Definition of Done
/{tech}:check-architecture Verify architecture compliance
/{tech}:generate-* Generate code following project patterns
/common:ralph-run "task" Run Claude in continuous loop until task is done
/qa:recette Automated acceptance testing via Chrome

See CLI Reference for all 211 commands across 26 namespaces.

Installation

NPX (Recommended)

npx @the-bearded-bear/claude-craft install ~/my-project --tech=symfony --lang=en

Clone + Makefile

git clone https://github.com/TheBeardedBearSAS/claude-craft.git
cd claude-craft
make install-symfony TARGET=~/my-project RULES_LANG=en

YAML Configuration (Monorepos)

# claude-projects.yaml
projects:
  - name: "my-monorepo"
    root: "~/Projects/my-monorepo"
    lang: "fr"
    modules:
      - path: "frontend"
        tech: react
      - path: "backend"
        tech: symfony
make config-install PROJECT=my-monorepo

See Installation Guide | Configuration

What Gets Installed

your-project/.claude/
  CLAUDE.md           # Minimal config (~200 tokens, auto-loaded)
  INDEX.md            # Quick reference summaries
  references/         # Full documentation (loaded on-demand via @)
  agents/             # AI specialist definitions
  commands/           # Slash commands
  skills/             # Best practices
  checklists/         # Quality gates
  templates/          # Code generation patterns
  hooks/              # Pre/Post tool execution scripts
  mcp/                # MCP server templates

Context usage is optimized: ~3,500 tokens always loaded vs ~70,000 if everything were inline (95% reduction).

Documentation

Document Description
Quickstart Get results in 10 minutes
Installation All installation methods
Configuration Project configuration
CLI Reference Full CLI documentation
Commands All 211 commands
Agents All 72 agents
Skills Best practices reference
Technologies Stack-specific guides
BMAD Guide Project management framework
Hooks Pre/Post tool execution
MCP Model Context Protocol integration
Privacy Policy Data protection and GDPR compliance
FAQ Common questions
Troubleshooting Problem solving
Migration v7 Upgrade from previous versions
Skills Publishing Guide for publishing skills
Compatibility Claude Code version compatibility

User Guides (Multilingual)

Step-by-step tutorials available in 5 languages:

Guide EN FR ES DE PT
Getting Started EN FR ES DE PT
Feature Development EN FR ES DE PT
Bug Fixing EN FR ES DE PT

All guides | Project Creation | Tools Reference | Troubleshooting | Backlog Management

Project Governance & Sustainability

Claude Craft is maintained by The Bearded CTO, a solo founder with deep involvement in the AFUP and Symfony French ecosystem.

Item Status
Funding model Bootstrapped — no VC, no sponsorships. Sustainability via consulting + future Pro support tier.
Maintenance commitment Active development since 2026-01. Targeting weekly minor releases, monthly minor versions.
Bus factor Currently 1 (solo maintainer). Co-maintainer search open — looking for one tech lead from the AFUP / Symfony / Flutter / React community.
Succession plan Documented in CHARTER.md. MIT license guarantees indefinite community fork rights if maintainer disappears.
Roadmap visibility GitHub Issues + CHANGELOG.md + recurring audit/YYYY-MM-DD-* reports
Decision process RFC via GitHub Discussions for breaking changes. ADRs in docs/adr/ for architectural choices.
Security disclosure See SECURITY.md. 90-day disclosure timeline, GPG-signed advisories.
License upgrade path MIT (free, perpetual). A future Commercial license is documented in LICENSE-COMMERCIAL.md (DRAFT) for support contracts; never restrictive of MIT rights.

For Enterprise Adopters

If you're considering Claude Craft for a team of 5+ developers and need :

  • SLA-backed support with response times
  • Custom integration for your stack
  • Onboarding consulting for your team
  • DPA (Data Processing Agreement) for RGPD compliance

Contact [email protected] to discuss a Pro support agreement. Pricing is project-based (no per-seat licensing).

Contributing

Contributions are welcome! Please read our Contributing Guide.

License

This project is licensed under the MIT License - see the LICENSE file for details.

Warranty Disclaimer

THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. See LICENSE for full terms.


Built for Claude Code by Anthropic. Inspired by Clean Architecture and Domain-Driven Design principles.

Reviews (0)

No results found