by vanzan01
🧠 Context Engineering Research - Not just another agent collection, but using research and context engineering to function as a collective. Hub-and-spoke coordination through Claude Code.
# Add to your Claude Code skills
git clone https://github.com/vanzan01/claude-code-sub-agent-collectiveGuides for using ai agents skills like claude-code-sub-agent-collective.
Last scanned: 5/15/2026
{
"issues": [
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: Zero-step sequence causes process hang and memory exhaustion",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "external-editor: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "inquirer: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "rollup: Rollup 4 has Arbitrary File Write via Path Traversal",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tmp: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter",
"severity": "low"
},
{
"type": "npm-audit",
"message": "vite: Vite middleware may serve files starting with the same name with the public directory",
"severity": "high"
}
],
"status": "FAILED",
"scannedAt": "2026-05-15T06:57:47.190Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Experimental NPX installer for TDD-focused AI agents
This installs a collection of AI agents designed for Test-Driven Development and rapid prototyping. It's experimental, opinionated, and I built it to speed up my own MVP development work.
npx claude-code-collective init
You get 30+ specialized agents that enforce TDD methodology and try to be smarter about using real documentation instead of guessing.
I got tired of:
So I built agents that:
/van command - Entry point that routes to @task-orchestratorPlus 20+ other specialized agents for specific development tasks.
npx claude-code-collective init
# Just core agents for lightweight projects
npx claude-code-collective init --minimal
# Focus on testing framework only
npx claude-code-collective init --testing-only
# Just the behavioral system and hooks
npx claude-code-collective init --hooks-only
# Interactive setup with choices
npx claude-code-collective init --interactive
your-project/
├── CLAUDE.md # Behavioral rules for agents
├── .claude/
│ ├── settings.json # Hook configuration
│ ├── agents/ # Agent definitions (30+ files)
│ │ ├── prd-research-agent.md
│ │ ├── task-orchestrator.md
│ │ ├── lib/
│ │ │ └── research-analyzer.js # Complexity analysis engine
│ │ └── ... (lots more agents)
│ └── hooks/ # TDD enforcement scripts
│ ├── test-driven-handoff.sh
│ └── collective-metrics.sh
└── .claude-collective/
├── tests/ # Test framework templates
├── metrics/ # Usage tracking (for development)
└── package.json # Testing setup (Vitest)
/van command routes to @task-orchestrator (the routing hub) which analyzes requests and delegates to specialists## DELIVERY COMPLETE
✅ Tests written first (RED phase)
✅ Implementation passes tests (GREEN phase)
✅ Code refactored for quality (REFACTOR phase)
📊 Test Results: X/X passing
# Check what's installed and working
npx claude-code-collective status
# Validate installation integrity
npx claude-code-collective validate
# Fix broken installations
npx claude-code-collective repair
# Remove everything
npx claude-code-collective clean
# Get help
npx claude-code-collective --help
After installing:
# 1. Validate everything installed correctly
npx claude-code-collective validate
# 2. Check status
npx claude-code-collective status
# 3. Restart Claude Code (required for hooks)
# 4. Try it out
# In Claude Code: "Build a simple todo app with React"
# Expected: routes to research → breaks down task → writes tests → implements
node --version (need >= 16)npm cache clean --forcenpx claude-code-collective init --force.claude/settings.json existsnpx claude-code-collective validate.claude-collective/metrics/ for timing dataBecause in my experience:
The agents enforce this because I believe it leads to better outcomes. If you disagree with TDD philosophy, this tool probably isn't for you.
To make agents smarter about modern development:
This stuff is experimental and sometimes overthinks things, but generally helpful.
AI agents can be unreliable. Here's what I built to deal with that:
Agents ignoring TDD rules: Hook system enforces test-first development before any code gets written.
Agents bypassing directives: CLAUDE.md behavioral operating system with prime directives that override default behavior.
Agents stopping mid-task: Test-driven handoff validation ensures work gets completed or explicitly handed off.
Agents making up APIs: Context7 integration forces agents to use real, current documentation.
Agents taking wrong approach: Central routing through @task-orchestrator hub prevents agents from self-selecting incorrectly.
Agents breaking coordination: Hub-and-spoke architecture eliminates peer-to-peer communication chaos.
Agents skipping quality steps: Quality gates that block completion until standards are met.
Agents losing context: Handoff contracts preserve required information across agent transitions.
Agents providing inconsistent output: Standardized TDD completion reporting from every implementation agent.
Agents working on wrong priorities: ResearchDrivenAnalyzer scores complexity to focus effort appropriately.
Most of these are enforced automatically through hooks and behavioral constraints, not just hoping agents follow instructions.
This is a personal project, but:
Get help: Run npx claude-code-collective validate for diagnostics
MIT Lice