by huisezhiyin
Lightweight AI Agent Harness for agentic coding: let strong models explore while humans steer with minimal specs, checkpoints, approval, validation, and reverse sync.
# Add to your Claude Code skills
git clone https://github.com/huisezhiyin/sdd-riperLast scanned: 5/30/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-30T15:25:14.585Z",
"npmAuditRan": true,
"pipAuditRan": true
}sdd-riper is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by huisezhiyin. Lightweight AI Agent Harness for agentic coding: let strong models explore while humans steer with minimal specs, checkpoints, approval, validation, and reverse sync. It has 307 GitHub stars.
Yes. sdd-riper passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/huisezhiyin/sdd-riper" and add it to your Claude Code skills directory (see the Installation section above).
sdd-riper is primarily written in Python. It is open-source under huisezhiyin on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh sdd-riper against similar tools.
No comments yet. Be the first to share your thoughts!
Code is cheap. Context, control, and evidence are not.
Let the model move the work forward. Let the human own goals, boundaries, permissions, checkpoints, evidence, and acceptance.
Strong coding agents no longer stop at suggestions. They can read a repository, change multiple files, run tools, validate results, and move an engineering task forward. Once the model can act, the bottleneck shifts from producing code to keeping the work aligned, observable, recoverable, and provable.
SDD-RIPER is a small, repo-native harness for that control problem. It is not a magic prompt and it is not heavyweight spec-driven development. It gives strong agents a durable working surface without turning every task into process theater.
| Human Owns | Agent Owns | Project Preserves |
|---|---|---|
| Goals, boundaries, permissions, checkpoints, acceptance | Exploration, implementation, iteration, tool use | Specs, context indexes, validation evidence, recovery state, reusable knowledge |
Start here: use the light skill · understand the thesis · open the docs map
The default entry is sdd-riper-one-light. Use the heavier sdd-riper-one when the task needs stricter gates, denser artifacts, or training/audit-ready traces.
The repository is organized around four complementary skills:
sdd-riper-one-light and sdd-riper-one control execution, checkpoints, validation, and reverse sync.codemap turns unfamiliar code into an agent-facing context index.new-chat-ready preserves recovery context for new chats, handoffs, and long pauses.Use this prompt for ordinary coding or documentation work:
Use sdd-riper-one-light for this task.
Do not change files yet.
First give me:
- your understanding of the task
- the core goal for this loop
- a minimal spec / summary
- Done Contract: what counts as done, and what proves it
- next actions
- risks
- validation method
Wait for my approval before execution.
For unfamiliar code, first ask for a CodeMap:
Use codemap.
Create a feature-level or project-level code terrain index before planning changes.
Focus on entry points, call chains, risk points, validation entry points, and the smallest code slice to read next.
For a fresh-chat handoff:
Use new-chat-ready.
Create a concise resume pack.
First check whether this agent can create a Codex thread directly. If it can, create the new conversation and send the compact continuation prompt there; otherwise give me a paste-ready fallback prompt.
Also scan and tidy reusable project knowledge so future chats stay small, but do not commit memory/spec/handoff files unless I explicitly approve.
These four skills share the same context principle: keep active context small, persist durable state outside the chat, and load only the slice needed for the next decision.
| Skill | Use When | Output |
|---|---|---|
sdd-riper-one-light |
Daily coding, docs, bugfixes, ordinary refactors, strong-model work | Same core controls with low-friction checkpoints, minimal spec, validation, reverse sync |
sdd-riper-one |
High-risk work, multi-file refactors, audit, training, complex handoff | Same core controls with explicit RIPER gates, fuller spec, denser artifacts, stronger blocking |
codemap |
Unfamiliar codebases, legacy systems, large modules, cross-repo tasks | Agent-facing code terrain index |
new-chat-ready |
New chat, resume pack, handoff, context compression, recovered sessions | Compact handoff, optional direct Codex thread creation, next-chat prompt, project-memory sync scan |
For Codex, Claude Code, and other agentic coding environments, the smallest useful repo layout is:
<repo>/
AGENTS.md
skills/
codemap/
new-chat-ready/
sdd-riper-one-light/
sdd-riper-one/
Recommended defaults:
AGENTS.md.AGENTS.md; use examples/global-agents.md as the template.sdd-riper-one-light by default.codemap before planning changes in unfamiliar or large code.new-chat-ready before long pauses, context resets, or handoffs.sdd-riper-one for high-risk or audit-heavy work.read context -> restate goal and risk -> checkpoint -> execute -> validate -> reverse sync
The harness keeps a few hard rules:
There are three different layers. Do not mix them.
| Layer | Purpose | Typical Location |
|---|---|---|
| Feature spec / handoff | Current task truth, decisions, progress, validation, resume state | mydocs/specs/*, mydocs/handoff/*, or project conventions |
| Project knowledge / memory | Stable facts, repeated pitfalls, reusable validation commands, project-specific rules | PROJECT_KNOWLEDGE.md, PROJECT_SPEC.md, PROJECT_MEMORY.md, mydocs/project/*, or files indexed by AGENTS.md |
| System-level defaults | Personal or team-wide agent routing and safety boundaries | system AGENTS.md, examples/global-agents.md |
Important privacy rule:
Project Sync Candidates and routes them according to AGENTS.md or explicit user instruction.Project Sync Candidate.This repository is public and reusable. Keep it clean:
.agent-memory/, .expcap/, SQLite files, Milvus Lite data, traces, episodes, candidates, assets, or local cache directories..env, credentials, tokens, API keys, private logs, personal paths, or user data..gitignore just to force local artifacts into the repo.expcap, prefer user-cache storage such as EXPCAP_STORAGE_PROFILE=user-cache and EXPCAP_HOME="$HOME/.expcap".For frontend/backend or microservice work, do not let the model ingest every repository at once.
Start with a project registry:
MULTI / multi-project
This workspace contains multiple repositories.
First discover projects and create a Project Registry.
Do not read all code at once.
Identify the main project, related projects, active_project, and change_scope.
Default to local. Before cross-project edits, stop at a checkpoint and wait for approval.
See skills/sdd-riper-one/references/multi-project.md for the fuller protocol.
| Path | What It Is |
|---|---|
AGENTS.md |
Project-level agent rules for this repository |
examples/global-agents.md |
System-level / personal AGENTS.md template |
skills/sdd-riper-one-light |
Default daily harness |
skills/sdd-riper-one |
Strict control protocol |
skills/codemap |
Code terrain indexing skill |
skills/new-chat-ready |
New-chat handoff and project-memory sync skill |
docs/README.md |
Docs map and reading path |
protocols/ |
Older protocol references |
If you want the shortest useful path:
skills/sdd-riper-one-light/README.md.codemap on unfamiliar code.skills/sdd-riper-one/README.md when you need stricter gates.docs/README.md only when you want the long-form articles.The long-form reading path contains three documents with distinct roles. See the docs map for the maintained index.
| Document | Core Question |
|---|---|
| Code is cheap. Don't write any. | Why AI coding shifts engineering value from producing code to controlling goals, context, checkpoints, validation, and risk |
| Hands-on AI Coding Harness | How to slice tasks, control context, use codemap, validate output, and leave recoverable state |
| General-purpose agents are a trap | Why capability-specific agents, explicit flows, business APIs, and necessary hardcode often solve real user problems more reliably than vague universality |
The important move is not to make AI a more obedient coding assistant.
The important move is to ac