# Add to your Claude Code skills
git clone https://github.com/iusztinpaul/squidLast scanned: 7/2/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-07-02T07:32:11.784Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}squid is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by iusztinpaul. The Software Factory. It has 128 GitHub stars.
Yes. squid passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/iusztinpaul/squid" and add it to your Claude Code skills directory (see the Installation section above).
squid is primarily written in Python. It is open-source under iusztinpaul on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh squid against similar tools.
No comments yet. Be the first to share your thoughts!
Claude Code writes code fast. It's worse at writing the code your team would actually ship — code that follows your conventions, has tests you trust, and survives review.
Squid is a Claude Code plugin that turns a feature spec into a reviewed PR through a 5-agent pipeline — PA → SWE → Tester → PR Reviewer → On-Call — with exactly two human gates: plan approval and final merge. No file templates, no render step: just markdown specs and agent contracts, and every file in your project gets written by an agent that reads them.
Run /squid-plan <feature-spec> then /squid-implement-night, and Squid drives this end-to-end:
feature spec
│
▼ /squid-plan
┌──────────────────────────────────────────────────────────────┐
│ grill → PA grooms Tasks Plan (+ADR) → HUMAN approves (1/2) │
│ → branch + worktree │
└──────────────────────────────────────────────────────────────┘
│ /squid-implement-night (runs end-to-end in the worktree)
▼
┌──────────────────────┐ ┌───────────────────┐ ┌─────────────────┐
│ /squid-implement-task│──▶ │ /squid-review │──▶ │ /squid-review-ci│
│ SWE ↔ Tester │ │ push → PA accept →│ │ On-Call drives │
│ commit each task │ │ PR-Reviewer │ │ CI to green │
└──────────────────────┘ └───────────────────┘ └─────────────────┘
│
▼
HUMAN squash-merges (2/2)
Branch + worktree, grooming, the per-task implement/verify loop, push, diff review, and CI are all automated — you only show up for the two gates. For a quick single change, run /squid-implement-task <task> (the same SWE ↔ Tester loop, no planning or review pipeline). Starting from an empty repo? Run /squid-scaffold first (see Quick start).
▎ Join 40k+ engineers subscribed to the Decoding AI Magazine — and learn to build agentic coding frameworks like Squid from scratch.

/plugin marketplace add iusztinpaul/squid
/plugin install squid@iusztinpaul
That's it. Open any repo in Claude Code; the agents and skills appear in /agents and /help. Run /plugin marketplace update iusztinpaul later to pull fresh changes.
Installing Squid also pulls in three plugins the agent team relies on, all from Anthropic's official claude-plugins-official marketplace — context7 (live library docs via MCP), code-review, and commit-commands. That marketplace ships with Claude Code, so these resolve and enable on their own. (Requires Claude Code v2.1.143+ for auto-enable; v2.1.110+ for the dependency mechanism. If a dependency fails to resolve, run /plugin marketplace update claude-plugins-official.)
Squid integrates with caveman — an optional plugin that compresses agent output ~75%. It isn't pulled in automatically (it lives in a different marketplace); install it alongside Squid and the pipeline picks it up:
/plugin marketplace add JuliusBrussee/caveman
/plugin install caveman@caveman
With caveman installed, Squid uses it for:
/caveman-commit (Conventional Commits, ≤50-char subject, why-over-what)./caveman-review style (L42: bug: user null. add guard.), on top of its usual rollup task./squid-scaffold offers to run /caveman-compress AGENTS.md, so the memory file every session loads is ~46% leaner; /squid-clean-memory chains the same pass with a de-duplication cut.SessionStart hook auto-compresses every reply; tune the level with /caveman [lite|full|ultra].Squid runs fine without it — each integration falls back to its native behavior.
Commit this into the target repo's .claude/settings.json:
{
"extraKnownMarketplaces": {
"iusztinpaul": {
"source": {
"source": "github",
"repo": "iusztinpaul/squid"
}
}
},
"enabledPlugins": {
"squid@iusztinpaul": true
}
}
When a teammate (or future-you on a fresh machine) opens that repo and trusts the folder, Claude Code prompts them to add the marketplace and install in one step. enabledPlugins alone isn't enough — extraKnownMarketplaces is what tells Claude Code where squid@iusztinpaul resolves to.
claude --plugin-dir /path/to/squid
Launches Claude Code with the plugin loaded for the session. No marketplace, no install, no cache. Re-run after edits. This is the only path that exercises your local working tree directly on Claude Code v2.1+.
/plugin marketplace add /path/to/squidreads the localmarketplace.jsonbut the plugin'ssourcepoints at GitHub — so the install still fetches fromiusztinpaul/squid, not your working tree.
Not on Claude Code, or only want Squid's skills without the full plugin? Use the cross-agent skills CLI:
npx skills add iusztinpaul/squid
It scans the repo for SKILL.md files and installs them into whichever agents it detects (Claude Code, Cursor, Codex, and 70+ more). Add -g to install into your user directory instead of the current project, or --skill <name> to grab specific ones:
npx skills add iusztinpaul/squid --skill squid-plan --skill squid-implement-task -g
Manage them with npx skills list, npx skills update, and npx skills remove <name>.
Skills only. This installs the
/squid-plan,/squid-implement-task, … skills but not Squid's five sub-agents (PA, SWE, Tester, PR-Reviewer, On-Call) or the bundled MCP plugins. The pipeline skills invoke those agents, so the full flow only works through the/plugin installpath above — reach fornpx skillswhen you want individual skills inside another agent.
/plugin uninstall squid@iusztinpaul
To also forget the marketplace (stops it checking for updates):
/plugin marketplace remove iusztinpaul
Installed via npx skills instead? Remove those with npx skills remove <name> (add --global if you used -g, or --all to clear everything).
| Surface | What it does |
|---|---|
/squid-scaffold |
Interactive bootstrap. Asks what you're building (backend / frontend / TUI / mix), reads the relevant specs, writes a tailored AGENTS.md, and lays down an empty folder skeleton. Run /squid-plan next to start building. |
/squid-plan <feature-spec> |
Plan a feature: grill the spec, PA grooms an approved Tasks Plan (+ optional ADR), create the branch + worktree. Start here. |
/squid-implement-night <plan> |
End-to-end single-feature pipeline (the diagram above) — builds the approved plan to a validated PR. |
/squid-implement-task · /squid-review · /squid-review-ci |
Granular pipeline stages, runnable standalone: build tasks · push + acceptance + diff review · CI validation. |
/squid-refactor · /squid-triage-issue · /squid-architecture-review · /squid-clean-docs · /squid-clean-memory · /squid-clean-harness · /squid-write-skill |
Standalone helpers (not wired into the main pipeline). |
product-architect, software-engineer, tester, pr-reviewer, oncall-engineer |
Sub-agents invoked by the pipelines; also usable directly via the Agent tool. See Which model runs which agent. |
squid-testing-python, squid-grilling, squid-self-improve |
Support skills the pipelines and agents lean on. |
Squid pins a model per agent, following Anthropic's advisor pattern — reasoning-heavy roles get the strongest model, and the token-hungry executor roles run one tier down, where most of the spend lands.
| Agent | Model | Effort | Why |
|---|---|---|---|
product-architect |
fable |
high |
Grooms the Tasks Plan and does acceptance review. Pure planning + judgment, and it runs once per feature — highest leverage, bounded cost. |
pr-reviewer |
fable |
high |
Reads one diff and tags Blocker/Nit. Review is judgment, not generation. |
software-engineer |
opus |
high |
Writes all the co |