Evidence-gated SDLC for Claude Code, installed as configuration (no app code, no Docker). Asks ordered questions and installs CLAUDE.md + .claude/ (rules, the chosen profile's agents/skills, hooks, artifact templates) + optional .mcp.json; run /sdlc to drive spec → review → build → test → security → ship through profile-aware quality gates with a tamper-evident gate ledger, working memory, and a self-improving learnings loop.
A minimal
- capability exposure inferred + 16
- trust mitigators mixed − 9
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 6m ago · see ecosystem CVEs →
Inferred surface — each links to servers holding it:
No known CVEs for this server.
No tool-safety findings — heuristic detectors run on the compute-risk cadence; a finding appears when a tool trips a rule.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.80.0 · analyzer v32 · 1h ago
skills & prompt files 126
- agent-rules claude_code_kit-0.80.0/CLAUDE.md
- agent-rules claude_code_kit-0.80.0/docs/agents.md
- skill claude_code_kit-0.80.0/skills/accessibility-review/SKILL.md
- skill claude_code_kit-0.80.0/skills/alembic-migrations/SKILL.md
- skill claude_code_kit-0.80.0/skills/anthropic-vertex-integration/SKILL.md
- skill claude_code_kit-0.80.0/skills/api-and-interface-design/SKILL.md
- skill claude_code_kit-0.80.0/skills/api-integration/SKILL.md
- skill claude_code_kit-0.80.0/skills/api-pagination-filtering-sorting/SKILL.md
- skill claude_code_kit-0.80.0/skills/archive-sprint/SKILL.md
- skill claude_code_kit-0.80.0/skills/async-python-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/auth-and-rbac/SKILL.md
- skill claude_code_kit-0.80.0/skills/backend-repo-architecture/SKILL.md
- skill claude_code_kit-0.80.0/skills/backlog/SKILL.md
- skill claude_code_kit-0.80.0/skills/browser-testing-with-devtools/SKILL.md
- skill claude_code_kit-0.80.0/skills/bug-hunt/SKILL.md
- skill claude_code_kit-0.80.0/skills/ci-cd-and-automation/SKILL.md
- skill claude_code_kit-0.80.0/skills/code-review-and-quality/SKILL.md
- skill claude_code_kit-0.80.0/skills/code-simplification/SKILL.md
- skill claude_code_kit-0.80.0/skills/component-design/SKILL.md
- skill claude_code_kit-0.80.0/skills/configargparse-yaml-env-layering/SKILL.md
- skill claude_code_kit-0.80.0/skills/consolidate-learnings/SKILL.md
- skill claude_code_kit-0.80.0/skills/containerization-and-deployment/SKILL.md
- skill claude_code_kit-0.80.0/skills/context-engineering/SKILL.md
- skill claude_code_kit-0.80.0/skills/cron-and-scheduled-jobs/SKILL.md
- skill claude_code_kit-0.80.0/skills/data-engineering-bigquery-gcs/SKILL.md
- skill claude_code_kit-0.80.0/skills/debugging-and-error-recovery/SKILL.md
- skill claude_code_kit-0.80.0/skills/decision/SKILL.md
- skill claude_code_kit-0.80.0/skills/dependency-verification/SKILL.md
- skill claude_code_kit-0.80.0/skills/deploy/SKILL.md
- skill claude_code_kit-0.80.0/skills/deprecation-and-migration/SKILL.md
- skill claude_code_kit-0.80.0/skills/design-patterns-and-conventions/SKILL.md
- skill claude_code_kit-0.80.0/skills/design-system-ops/SKILL.md
- skill claude_code_kit-0.80.0/skills/distributed-systems-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/django-async-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/django-migrations/SKILL.md
- skill claude_code_kit-0.80.0/skills/django-react-integration/SKILL.md
- skill claude_code_kit-0.80.0/skills/django-rest-framework-packages/SKILL.md
- skill claude_code_kit-0.80.0/skills/django-rest-framework-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/django-service-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/doc-consolidation/SKILL.md
- skill claude_code_kit-0.80.0/skills/docker-compose/SKILL.md
- skill claude_code_kit-0.80.0/skills/docker-shared/SKILL.md
- skill claude_code_kit-0.80.0/skills/dockerfile-backend/SKILL.md
- skill claude_code_kit-0.80.0/skills/dockerfile-frontend/SKILL.md
- skill claude_code_kit-0.80.0/skills/documentation-and-adrs/SKILL.md
- skill claude_code_kit-0.80.0/skills/doubt-driven-development/SKILL.md
- skill claude_code_kit-0.80.0/skills/edge-to-service-trust-boundary/SKILL.md
- skill claude_code_kit-0.80.0/skills/execute/SKILL.md
- skill claude_code_kit-0.80.0/skills/fastapi-service-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/file-export-and-reporting/SKILL.md
- skill claude_code_kit-0.80.0/skills/frontend-repo-architecture/SKILL.md
- skill claude_code_kit-0.80.0/skills/frontend-ui-engineering/SKILL.md
- skill claude_code_kit-0.80.0/skills/gcp-cloud-run-github-actions/SKILL.md
- skill claude_code_kit-0.80.0/skills/gcs-file-storage-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/git-workflow-and-versioning/SKILL.md
- skill claude_code_kit-0.80.0/skills/grafana-dashboards-and-alerts/SKILL.md
- skill claude_code_kit-0.80.0/skills/graphql-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/idea-refine/SKILL.md
- skill claude_code_kit-0.80.0/skills/incident-postmortem/SKILL.md
- skill claude_code_kit-0.80.0/skills/incremental-implementation/SKILL.md
- skill claude_code_kit-0.80.0/skills/interview-me/SKILL.md
- skill claude_code_kit-0.80.0/skills/kafka-config-driven/SKILL.md
- skill claude_code_kit-0.80.0/skills/kubectl-operations/SKILL.md
- skill claude_code_kit-0.80.0/skills/kubernetes-workload-hardening/SKILL.md
- skill claude_code_kit-0.80.0/skills/langfuse-llm-tracing/SKILL.md
- skill claude_code_kit-0.80.0/skills/library-review/SKILL.md
- skill claude_code_kit-0.80.0/skills/llm-caching-strategies/SKILL.md
- skill claude_code_kit-0.80.0/skills/llm-gateway-and-routing/SKILL.md
- skill claude_code_kit-0.80.0/skills/llm-inference-optimization/SKILL.md
- skill claude_code_kit-0.80.0/skills/load-testing/SKILL.md
- skill claude_code_kit-0.80.0/skills/manual-test/SKILL.md
- skill claude_code_kit-0.80.0/skills/modernization-and-migration/SKILL.md
- skill claude_code_kit-0.80.0/skills/multi-tenancy-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/node-express-service/SKILL.md
- skill claude_code_kit-0.80.0/skills/node-objection-knex/SKILL.md
- skill claude_code_kit-0.80.0/skills/notifications-and-messaging/SKILL.md
- skill claude_code_kit-0.80.0/skills/object-oriented-design/SKILL.md
- skill claude_code_kit-0.80.0/skills/observability-and-logging/SKILL.md
- skill claude_code_kit-0.80.0/skills/otel-tracing/SKILL.md
- skill claude_code_kit-0.80.0/skills/over-engineering-review/SKILL.md
- skill claude_code_kit-0.80.0/skills/pentesterflow-pentest/SKILL.md
- skill claude_code_kit-0.80.0/skills/performance-optimization/SKILL.md
- skill claude_code_kit-0.80.0/skills/planning-and-task-breakdown/SKILL.md
- skill claude_code_kit-0.80.0/skills/playwright-verification/SKILL.md
- skill claude_code_kit-0.80.0/skills/pydantic-schema-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/python-dao-and-database/SKILL.md
- skill claude_code_kit-0.80.0/skills/radix-tailwind-component-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/rag-and-model-tuning/SKILL.md
- skill claude_code_kit-0.80.0/skills/react-hook-form-zod-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/redis-caching-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/refresh-docs/SKILL.md
- skill claude_code_kit-0.80.0/skills/remember/SKILL.md
- skill claude_code_kit-0.80.0/skills/safety-critical-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/scope/SKILL.md
- skill claude_code_kit-0.80.0/skills/sdlc/SKILL.md
- skill claude_code_kit-0.80.0/skills/security-and-hardening/SKILL.md
- skill claude_code_kit-0.80.0/skills/security-verification/SKILL.md
- skill claude_code_kit-0.80.0/skills/shannon-ai-pentest/SKILL.md
- skill claude_code_kit-0.80.0/skills/shell-review/SKILL.md
- skill claude_code_kit-0.80.0/skills/shipping-and-launch/SKILL.md
- skill claude_code_kit-0.80.0/skills/simplification-debt/SKILL.md
- skill claude_code_kit-0.80.0/skills/smoke-test/SKILL.md
- skill claude_code_kit-0.80.0/skills/source-driven-development/SKILL.md
- skill claude_code_kit-0.80.0/skills/spec-driven-development/SKILL.md
- skill claude_code_kit-0.80.0/skills/sprint/SKILL.md
- skill claude_code_kit-0.80.0/skills/strix-ai-pentest/SKILL.md
- skill claude_code_kit-0.80.0/skills/system-design-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/tanstack-react-query-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/task-tracker-sync/SKILL.md
- skill claude_code_kit-0.80.0/skills/temporal-config-driven/SKILL.md
- skill claude_code_kit-0.80.0/skills/temporal-developer/SKILL.md
- skill claude_code_kit-0.80.0/skills/test-driven-development/SKILL.md
- skill claude_code_kit-0.80.0/skills/test-plan-review/SKILL.md
- skill claude_code_kit-0.80.0/skills/testing-conventions/SKILL.md
- skill claude_code_kit-0.80.0/skills/threat-model/SKILL.md
- skill claude_code_kit-0.80.0/skills/ticketing-and-traceability/SKILL.md
- skill claude_code_kit-0.80.0/skills/triage/SKILL.md
- skill claude_code_kit-0.80.0/skills/ui-ux-design/SKILL.md
- skill claude_code_kit-0.80.0/skills/unit-test/SKILL.md
- skill claude_code_kit-0.80.0/skills/using-agent-skills/SKILL.md
- skill claude_code_kit-0.80.0/skills/vitest-rtl-msw-patterns/SKILL.md
- skill claude_code_kit-0.80.0/skills/zap-vapt-scanning/SKILL.md
- skill claude_code_kit-0.80.0/skills/zustand-state-patterns/SKILL.md
- agent-rules claude_code_kit-0.80.0/templates/CLAUDE.md
- skill claude_code_kit-0.80.0/templates/org/skills/customer-issue-to-fix/SKILL.md
- skill claude_code_kit-0.80.0/templates/org/skills/feature-from-idea/SKILL.md
[](https://mcpobservatory.com/servers/pypi:claude-code-kit/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of Arjunsingh Yadav.