by griddynamics
An instruction layer for AI coding agent
# Add to your Claude Code skills
git clone https://github.com/griddynamics/rosettaLast scanned: 6/2/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-06-02T08:39:38.982Z",
"npmAuditRan": true,
"pipAuditRan": false
}See how rosetta compares with popular alternatives.
rosetta is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by griddynamics. An instruction layer for AI coding agent. It has 360 GitHub stars.
Yes. rosetta passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/griddynamics/rosetta" and add it to your Claude Code skills directory (see the Installation section above).
rosetta is primarily written in TypeScript. It is open-source under griddynamics on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh rosetta against similar tools.
No comments yet. Be the first to share your thoughts!
30 days in the Featured rail · terms & refunds
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Automated security scan — not a certification.
https://github.com/user-attachments/assets/6df6e217-3e5c-4691-84ed-7440701a87de
AI coding agents are great — until you try to use them across a real team. Everyone builds their own prompts and instructions, knowledge stays in silos, and the agent — not knowing your architecture or constraints — guesses from a few open files and confidently does the wrong thing.
That's why we built Rosetta — open-source engineering governance and context for AI coding agents. It's not another proprietary agent; it works with the tools you already use (Claude Code, Cursor, Copilot, Codex, and other MCP-compatible agents) and loads your team's shared engineering instructions into every session. Everything is versioned in Git and can run inside your perimeter.
Teach agents how to think, not what to do. The model already knows Python and React; what it lacks is your engineering discipline. That's what Rosetta encodes.
[!NOTE] If you are effectively using your current setup, writing your own skills, and managing AI using your own processes, you probably don't need Rosetta.
Rosetta-guided work follows five phases — Prepare → Research → Plan → Act → Validate — with approval gates at the key decision points.
Read more in the User Guide.
Overall Process: Install (plugin preferred) → Initialize workspace → Configure workspace ecosystem (tools, MCPs) → Proceed with Coding, Modernization, Analysis, etc.
Please follow Quick Start Guide which will walk you through the process.
Very detailed information on installation and configuration in all available modes is in Installation Guide.
Reusable units of work the AI loads on demand. Workflows pick them for you, and most can also be called by name.
Let Rosetta decide
rosetta: You want Rosetta to handle it itself. Classifies your request, picks the matching workflow, and runs it end to end.Understand what exists
load-project-context: Gives the AI your project's business context, architecture, and past decisions before any work starts.codemap: Gives the AI a structural map of the repo to navigate by. Uses your LSP or code-graph tooling when available.discovery: Evidence-backed picture of what exists today, including whether this was already attempted and done wrong.reverse-engineering: Recovers domain rules and intent from code into business specs.research: Researches any question grounded in your project, with real sources. Compares options and validates its own conclusions.Decide what to build
requirements-authoring: Precise and atomic requirement units: EARS acceptance criteria, rationale, alternatives, dependencies, traceability. You combine them into stories or features.requirements-use: Plans and builds from approved requirements. Every task, test, and result traces back to a requirement ID.design: Deep architecture decisions with defended rejections, plus domain playbooks: distributed systems, multi-tenancy, payments, regulated data, migrations.tech-specs: Produces target-state interfaces, API contracts, data models, and security considerations. Forces the AI to read the real code, grounding its assumptions.planning: An ordered graph of AI sessions for automated execution, each with its own scope, checklist, and handoff.backlog: Turns a thin ticket into a buildable one: gaps found, questions posed, facts written back. Also produces a WBS for people.reasoning: Breaks a hard problem down, identifies roles, boundaries, events, models. Works via Tree-of-Thoughts, expanding every alternative to its conclusion before committing.Build it
coding: Simple, minimal, in-scope changes following KISS/SOLID/DRY. Systematic dependency-ordered validation: database, API, web, mobile. Covers IaC.testing: Isolated and idempotent at 80%+ coverage, external calls mocked only. Scenario tests start from a sequence diagram: what depends on what, what is shared setup, then the test.debugging: OODA. Root cause with evidence before any fix, one hypothesis at a time, prevention recommended. Three failed fixes means a design problem.security: Threat modeling plus code, dependency, IaC, container, cloud, and API review. Secrets gated before ingestion, active testing only where authorized. Output is remediation tasks.natural-writing: Strips AI giveaways: hype words, em-dashes, rhetorical questions, fake engagement. For docs, emails, posts, release notes.Test automation and QA
qa-knowledge: QA engineering end to end: sources into requirements, gap analysis, Given-When-Then specs, TMS export, runnable API and UI tests, failure triage. Every case is implemented or recorded as a gap, never dropped.qa-structure: Canonical paths, slugs, and state files for QA runs. Each session in its own folder, so parallel runs never collide and a long flow knows which phase is done.data-collection: Read-only pull from issue tracker, test management, wiki, and the codebase. A ticket gets recorded, not acted on. Gaps and permission walls recorded, never guessed.Delegate the work
orchestration: Sizes the work, builds and briefs a subagent team, and gates every result through fresh eyes instead of self-review. Large plans run with phases, steps, and tasks.subagent-directives: Requested automatically by the orchestrator for every subagent: stay in scope, stop and report when blocked rather than improvise, prove each claim with links and line ranges.large-workspace-handling: Use when a repository is too big to handle at once. Splits into non-overlapping scopes, one subagent each, then a second wave verifies the work.coding-agents-farm: Runs Claude, Codex, Copilot, Gemini and others in parallel on isolated git worktrees, for throughput or cross-model validation. Burns money fast, so it is gated behind explicit consent.Keep the session on track
hitl: Makes the AI work together with you. Approval gates at specs, implementation, and closing, with review in small batches. A clear affirmative counts.questioning: A few high-impact questions before work starts, each one decision, with why it matters and a recommended answer. Anything researchable it answers itself.self-organization: Keeps work organized as it grows: splits oversized tasks and files, clears stale content, flags when a session should res