by azalio
Plan-then-build AI coding for Claude Code & Codex CLI — you approve the plan before the model writes a line of code. SPEC → PLAN → TEST → CODE → REVIEW → LEARN
# Add to your Claude Code skills
git clone https://github.com/azalio/map-frameworkGuides for using ai agents skills like map-framework.
Last scanned: 8/17/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-08-17T04:42:30.136Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how map-framework compares with popular alternatives.
map-framework is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by azalio. Plan-then-build AI coding for Claude Code & Codex CLI — you approve the plan before the model writes a line of code. SPEC → PLAN → TEST → CODE → REVIEW → LEARN. It has 155 GitHub stars.
Yes. map-framework passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/azalio/map-framework" and add it to your Claude Code skills directory (see the Installation section above).
map-framework is primarily written in Python. It is open-source under azalio on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh map-framework against similar tools.
No comments yet. Be the first to share your thoughts!
From $49 · 30 days · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
After mapify upgrade, Claude can invoke any MAP skill through the Skill tool on your behalf except /map-release, which remains manual-only. Workflow confirmation gates still apply; /map-upgrade requires explicit consent for a major version.
Most AI agents rush straight to code — fast wrong answers, silent rework.
Common failure modes MAP eliminates:
MAP moves engineering judgment earlier: write down the behavior, split the work into small contracts, verify each stage, review against the spec, and save lessons for the next run.
Skill maintainers can use mapify skill-eval optimize <skill> --provider claude|codex --apply
to update only the selected provider's description in the shared template source;
the opposite provider stays unchanged (details).
1. Install
uv tool install mapify-cli
# or with pip
pip install mapify-cli
Requires Python 3.11+, and python3 on your PATH must be that interpreter — the
installed hooks and .map/scripts/ runners execute through a #!/usr/bin/env python3 shebang, not through the interpreter that ran mapify. mapify init
checks it up front and tells you what to fix (details).
For Go projects requiring build tags, set checks.go.tags: integration,netgo in
.map/config.yaml for the Stop hook's build check (configuration).
2. Initialize your project
Claude Code is the default provider. Cross-AI review compares explicit host and
reviewer adapter vendors; same-vendor or unknown provenance is not labeled
independent (details).
An offline historical review corpus
provides pinned introducing diffs, adjudicator-only labels and audited controls.
It starts no reviewers and makes no evaluation or policy-promotion claims.
An opt-in bounded subscription pilot
adds offline preparation/reporting and a separately acknowledged, at-most-six-call
Claude CLI runner. Its v2 inputs are complete allowlisted -U30 diffs; prompts
estimated above 60,000 tokens are excluded, never truncated. Results require
manual adjudication; historical v1 runs cannot be resumed.
A paired offline evaluator measures precision/recall before
and after verification, including real defects lost when dismissing findings.
Claude Code:
cd your-project
mapify init
claude
Codex CLI:
cd your-project
mapify init . --provider codex
codex
The generated .codex/config.toml enables hooks. On first use, review and trust
the project hook configuration when Codex prompts you; /hooks shows the eight
installed lifecycle event groups.
3. Run the loop
Claude Code:
/map-plan → /map-efficient → /map-check → /map-review → /map-learn
Codex CLI:
$map-plan → $map-efficient → $map-check → $map-review → $map-learn
That's the whole golden path.
Need to reorder unstarted work in an active run? Use the audited
resequence_pending command
without resetting the current step, retries, results or baselines.
/map-plan for anything non-trivial — it clarifies behavior and splits the work into contract-sized subtasks./map-prd-review directly, or accept /map-plan's optional readiness preflight. A non-ready result shows the gaps and asks whether to revise or continue planning anyway./map-efficient./map-plan off-ramps you to a direct edit or /map-fast instead of forcing full planning./map-wayfind resolves open design decisions on a durable map. Evidence-first research is on by default: factual lookups stay light; uncertain decisions get independent investigations and targeted checks, with no default attempt cap for authorized read-only work. Opt in at task start with configure_research --budget-limit N; existing caps remain binding and extensions require scoped user approval. Consequential or genuinely expensive actions still need separate consent. Stale open-ticket evidence can be explicitly refreshed without erasing history or resetting that budget. Research handoffs are checked before /map-plan; historical decisions retain explicit legacy provenance./map-auto routes and drives the chain autonomously; hard-stops only on dangerous_action/safety_guardrail holds.Codex CLI ships the same 23 MAP skill entry points and invokes them with
$:$map-plan,$map-efficient,$map-check, and so on. See the Usage Guide.
Framework updates. Automatic stable updates are enabled by default. Normal MAP skills check at most once per project every 24 hours, apply eligible patch and minor releases, and ask before a major release after showing its official feature highlights. Rejecting a major offer is remembered per project for that exact version, so it is not offered again; any different patch, minor, or major version is offered normally. Use these project controls and provider-specific manual skills when needed:
mapify init . --no-auto-update # persist updates.auto: false
mapify init . --auto-update # re-enable automatic checks
/map-upgrade # Claude manual check/upgrade
$map-upgrade # Codex manual check/upgrade
Automatic failures stay silent so they do not block the requested workflow;
manual checks report errors explicitly. The public mapify upgrade command is
separate and unchanged: it upgrades only the CLI and does not refresh project
files. See Automatic and manual framework updates.
If a legacy map-debug skill cannot load its ../../references/ documents, refresh
the project after upgrading the CLI:
mapify init . --force --no-git --provider codex --refresh-existing
(use --provider claude for Claude). This restores missing managed references;
upgrading the CLI alone does not.
The DevOpsConf 2026 case study applies this process to a production Kubernetes Project Operator:
SPEC → PLAN → TEST → CODE → REVIEW → LEARN| Good fits | Poor fits |
|---|---|
| Complex backend features | Typos and tiny edits |
| Kubernetes controllers and operators | Small one-off scripts |
| Internal platform tooling | Product ideas where behavior is still unknown |
| API, CRD, or domain-model changes with invariants | Broad rewrites without clear boundaries |
| Refactoring with a meaningful test harness | Tasks cheaper to do directly than to plan |
| Command | Use For |
|---|---|
/map-auto |
Single-entry autonomous autopilot: routes a task through existing MAP workflows and drives the chain to a committed branch |
/map-plan |
Start here for non-trivial work; clarify behavior and decompose tasks |
/map-prd-review |
Review a PRD with a 0-10 readiness score, strengths, risks, and uncovered edge cases |
/map-wayfind |
Too foggy to plan? Resolve design decisions on a durable map before /map-plan; cite HTTP(S) docs, repo sources or hashed ticket-local observations |
/map-efficient |
Implement an approved plan or already-scoped task |
/map-fast |
Small, low-risk changes where full planning is overhead |
/map-check |
Quality gates, verification, and artifact checks; --docs reports docs-vs-code drift |
/map-review |
Pre-commit semantic review against the plan, tests, and diff |
/map-learn |
Capture project memory and reusable lessons |
/map-understand |
Interactive teaching and quiz mode for code, diffs, and workflow results |
/map-debug |
Bug fixes and debugging |
/map-task |
Execute a single subtask from an existing plan |
/map-tdd |
Test-first implementation workflow |
/map-release |
Package release workflow; Codex $map-release shares the same commit-bound CI gates |
/map-resume |
Resume interrupted workflows |
For stacked PRs, use `/map-revie