by tikalk
🐙 ADLC Team Skills — Agentic SDLC for Engineering Teams
# Add to your Claude Code skills
git clone https://github.com/tikalk/adlc-team-skillsGuides for using ai agents skills like adlc-team-skills.
Last scanned: 8/5/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-08-05T06:28:18.987Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}adlc-team-skills is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by tikalk. 🐙 ADLC Team Skills — Agentic SDLC for Engineering Teams. It has 129 GitHub stars.
Yes. adlc-team-skills passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/tikalk/adlc-team-skills" and add it to your Claude Code skills directory (see the Installation section above).
adlc-team-skills is primarily written in Shell. It is open-source under tikalk on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh adlc-team-skills against similar tools.
No comments yet. Be the first to share your thoughts!
Agent skills that give coding agents your team's context at session start, so they stop working like strangers.
Coding agents start every session knowing nothing about your team. They don't know your conventions, which patterns you deprecated, or why service X never calls service Y. Developers compensate with personal CLAUDE.md files, but those live on one machine, drift out of date, and don't transfer between teammates or tools.
team-boot runs at session start and injects an index of your team's
rules, personas, and decisions — names and one-line descriptors, roughly a
hundred tokens. Not the rules themselves. When the active task matches a
rule, the agent pulls that rule's full text on demand. A task touching SQL
loads the SQL rule; nothing else loads.
team-boot → auto-runs at session start (event hook), injects the index
team-discover → /team-discover for a structured match table
team-constitution → interactively define your team's principles
team-repair → re-index, conflict scan, freshness check
The index lives in a git repo (team-ai-directives) — versioned, reviewed by PR, shared by the whole team.
LLMs fill ambiguity with invention. mission-brief forces a contract first:
goal, constraints, non-goals, success criteria — then runs
specify → plan → tasks → implement ↔ converge. When the agent gets something
wrong, you fix the spec, not the code.
mission-brief "add user profile API with JWT"
mission-brief --resume # continue an interrupted mission
The evals skills build executable evaluation suites (PromptFoo or DeepEval).
Anything that can be checked by code gets a binary grader — plain assertions,
Tier 1. LLM judges are Tier 2, reserved for what static checks can't verify.
Nothing auto-merges; the pipeline ends at a PR a human reviews.
evals-init → evals-specify → evals-clarify → evals-implement → evals-validate → evals-analyze
When a session surfaces a hard-won fix, levelup-specify extracts it as a
Context Directive Record (CDR) and commits it back to the team repo — the
next session starts smarter.
levelup-init → levelup-specify → levelup-clarify → levelup-publish
product-* skills capture product decisions as PDR files and compile them
into PRD.md. architect-* skills capture architecture decisions as ADRs
(Rozanski & Woods viewpoints) and compose them into AD.md. Every decision
traces from record to document to code.
product-init|specify → product-clarify → product-implement → product-analyze
architect-init|specify → architect-clarify → architect-implement → architect-analyze
Base models improve; yesterday's scaffolding becomes today's context noise.
team-repair --build-to-delete re-runs evals without a rule; if the model
passes anyway, the rule is proposed for deletion. Rules should shrink over
time, not grow.
Long contexts measurably degrade LLM performance — even with perfect retrieval (arXiv:2510.05381, 13.9%–85% degradation by length alone). This repo exists because of that failure mode, not in spite of it: agents get an index by default and pull full rules only when relevant. If your instinct is "more rules in context don't work" — we agree. That's the design.
# Skills + slash commands + session_start events
npx adlc-skills-cli add tikalk/adlc-team-skills -a opencode
# Or plain skills (no commands/events)
npx skills add tikalk/adlc-team-skills -a claude -g
Works with any agent supporting the Agent Skills standard — Claude Code, Codex, OpenCode, Cursor, Copilot, and others.
adlc-skills-cli wraps npx skills add
and additionally generates /name slash commands and wires session_start event
hooks (via .events.json) for 9 coding agents. Skills repos without .events.json
get commands only.
First run: team-boot fires at session start. On an unconfigured project
it points you to /team-setup, which clones, links, or scaffolds your
team-ai-directives repo. team-constitution fills in your principles.
Using agentic-sdlc-spec-kit alongside this repo? See
Coexistence with Spec Kit for the
conflict-free install flow.
mission-brief doesn't force a proprietary ecosystem. At mission start it
scans installed skills directories, reads each SKILL.md frontmatter, and
hands the inventory to the subagent — the model picks the skill that fits
each step. Works alongside:
| Source | Examples |
|---|---|
| mattpocock/skills | /tdd, /grill-me, /code-review |
| addyosmani/agent-skills | Exit-criteria checklists |
| superpowers | Workflow skills |
| spec-kit / agentic-sdlc-spec-kit / OpenSpec | SDD command frameworks |
| This repo | product-specify, architect-specify, evals-validate, levelup-specify |
| Your own | Anything following the SKILL.md standard |
On 2026-07-27 a supply-chain worm briefly injected a malicious payload into
this repo's .claude/ and .vscode/ directories via a stolen maintainer
token (exposure window ~11:06–18:30 UTC). The payload only executed if you
cloned the repo and opened it in VS Code or started a Claude Code session
inside it; the npx skills install path never shipped or ran those files.
History was rewritten to strip the payload from all commits and tags, tokens and secrets were rotated, and branch protection now blocks the vector used. Details and remediation steps: issue #1.
Lesson for any repo: treat .vscode/tasks.json and .claude/settings.json
in a clone as executable code, and disable editor auto-run tasks.
team-boot — session-start bootstrap; injects the directives index. Auto-triggered.team-discover — manual re-scan; structured match table (/team-discover).team-setup — clone, link, or scaffold a team-ai-directives repo.team-constitution — define or amend team principles interactively.team-repair — re-index, conflict scan, freshness, --build-to-delete.team-skills — browse/install team skills from the directives repo.levelup-init — brownfield CDR discovery from an existing codebase.levelup-specify — extract CDRs + paired evals from the current session.levelup-clarify — review, accept, reject, or defer pending CDRs.levelup-publish — compile accepted CDRs into directives + goldensets + draft PR.change-init — mine git history for Change Decision Records via issue-linked commits; recovers the why behind past changes (reverts, fix chains).change-clarify — review, accept, reject, or defer mined ChDRs (provenance gate on Decision claims).change-publish — promote accepted ChDRs to .adlc/memory/chdr/; team-boot injects the chdr.md index at session start.product-init — brownfield PDR discovery. product-specify — greenfield creation.product-clarify — refine and approve. product-implement — generate PRD.md.product-analyze — PDR↔PRD consistency. product-roadmap — milestone progress.architect-init — reverse-engineer ADRs. architect-specify — create ADRs.architect-clarify — refine. architect-implement — generate AD.md.architect-analyze — ADR↔AD consistency.evals-init — scaffold evals/{system}/ with security baseline.evals-specify — extract criteria from specs / failure traces.evals-clarify — cluster, isolate holdout, publish goldset.evals-implement — generate graders + unit tests.evals-validate — run evaluation pyramid, TPR/TNR + SLA headroom.evals-analyze — route failures to rules or evaluator backlog.mission-brief — spec-contract pipeline with converge loop, circuit breaker, resume.tech-radar-context — injects Tikal Tech Radar context for tech choices. Auto-triggered.workspace — multi-repo workspace: --init creates .adlc/ structure + .gitignore, discover/link/audit child repos.Skills are organized into category subdirectories under skills/:
skills/
├── architect/ # architect-* (5 skills)
├── product/ # product-* (6 skills) + product-templates/
├── levelup/ # levelup-* (4 skills) + levelup-helpers.{sh,ps1}
├── change/ # change-* (3 skills) — ChDRs from git history
├── mission-brief/ # core SDD orchestrator (1 skill)
├── evals/ # evals-* (6 skills) + evals-templates/
├── tech-radar/ # tech-radar-* (1 skill) + resources/radar.json
├── workspace/ # workspace (1 skill) — multi-repo coordination
└── team/ # team-* (6 skills) + team-helpers.{sh,ps1}
This places every single skill exactly 2 levels deep, fully resolving the default depth limit of the skills CLI and ensuring all skills install out of the box.
All skills write to .adlc/ (project root) and the team AI directives re