Software Development Agent Stack · open source
Automate your SDLC. And everything around it.
An elite expert for every department.
64 opinionated playbooks — code review, security audits, deploy pipelines, proposals, release notes, outbound sequences — packaged as Claude Code skills that trigger on plain-English requests. Each one captures a procedure a senior practitioner in that role would follow, shipped as a Markdown file your team can read, edit, and override. 8 departments. 9 end-to-end orchestrators. One install command.
brew install tahirraufkeeyu/tap/skillskit && skillskit install all One line. macOS and Linux via Homebrew. Windows, curl, and manual install →
Every skill ships a Customise for your organisation button — rewrite any skill for your stack via an LLM, fully in your browser. Add your OpenRouter key →
64 skills · 12 safe · 38 writes-local · 12 writes-shared · 2 destructive
Run it. Or rewrite it for your stack.
Left: how a skill runs end to end when you invoke it. Right: how the per-skill customizer rewrites it for your org in one click. Both are real flows.
~/.claude/skills/, then start Claude Code. Skills auto-trigger
by description — no slash commands to memorise.
See all install options → Install
Pick your platform.
The skillskit CLI is a single cross-platform binary — macOS, Linux, Windows
(amd64 + arm64) — with all 64 skills baked in. No runtime, no Node, no
Python. Installs skills into ~/.claude/skills/; also targets Cursor, Codex,
and Gemini with --host.
macOS & Linux
Homebrew on macOS or Linuxbrew on Linux.
brew tap tahirraufkeeyu/tap
brew install skillskit
skillskit install all
Upgrading? brew upgrade skillskit && skillskit update
Windows
One-liner via the Scoop package manager.
scoop bucket add skillskit https://github.com/tahirraufkeeyu/scoop-bucket
scoop install skillskit
skillskit install all
Upgrading? scoop update skillskit && skillskit update
One-liner (no package manager)
Grabs the latest release from GitHub, verifies SHA256, drops the binary on PATH.
curl -fsSL https://skillskit.dev/install | sh
skillskit install all
CI runners, containers, any Unix without a package manager.
If skillskit.dev is unreachable, swap the URL for
raw.githubusercontent.com/tahirraufkeeyu/software-development-agent-stack--sdas/main/scripts/install-remote.sh
— same script.
Windows — PowerShell
Same installer, PowerShell flavour. Adds %LOCALAPPDATA%\Programs\skillskit to your user PATH.
iwr https://skillskit.dev/install.ps1 -useb | iex
skillskit install all
Open a new terminal after install so PATH picks up.
Behind a firewall? Use raw.githubusercontent.com/tahirraufkeeyu/software-development-agent-stack--sdas/main/scripts/install-remote.ps1
— same script, served from GitHub.
After install
skillskit install developers # one department
skillskit install --host cursor all # target Cursor instead
skillskit list # see what's installed
skillskit search "code review" # find skills by keyword
skillskit update # re-sync to the latest
skillskit remove all # uninstall everything this kit shipped
skillskit --help # full command list
Skills are embedded in the binary. Upgrading the CLI (via brew upgrade,
scoop update, or re-running the curl installer) upgrades the skills;
skillskit update re-syncs any already-installed skills to the new
versions without touching custom skills or other tools.
Don't want to use the CLI? The legacy git clone && ./install.sh
path is still supported —
see the README.
Other install options
- GitHub Releases — download the matching archive from
the latest release
and drop the binary on your
PATH. Checksums inchecksums.txt. - go install (requires Go 1.22+) —
go install github.com/tahirraufkeeyu/software-development-agent-stack--sdas@latestbuilds and installs the same binary GoReleaser ships, with all skills embedded. Use this if you want the latestmainrather than a tagged release. - Git clone + install.sh (legacy) — the shell-script installer from the repo root still works identically. Useful for air-gapped environments or editing skills locally before installing.
Why skills, not just prompts.
Most "AI for teams" content stops at "install Claude Code and good luck." skillskit is the missing layer — the one that makes Claude trigger on the right work, follow the same process your senior people would, and produce output consistent with what your team already ships.
A skill is a single Markdown file (SKILL.md) that declares when it should
run, the exact procedure, concrete examples, constraints, and quality checks. Claude
Code auto-triggers the right one based on your natural-language request — no slash
commands to memorise, no framework to learn.
MIT licensed. No vendor lock-in, no telemetry, no black box. Fork it, customise it for your org, ship it.
An expert for every department.
Eight teams. 64 playbooks. Browse by role — each department ships its own skill set, MCP recommendations, and recommended weekly rhythm.
Developers
9 skillsCode review, tests, refactoring, debug, commits, API design, docs, scaffolding.
1 orchestrator — ship-feature
DevOps
7 skillsDeploy, CI/CD YAML, Terraform, Helm, incidents, cloud cost optimisation.
1 orchestrator — release-to-prod
Infrastructure
7 skillsMonitoring, log aggregation, SSL certs, network diagnostics, backups, cluster health.
1 orchestrator — infra-triage
Internal comms
7 skillsStatus updates, postmortems, meeting notes, changelogs, onboarding, announcements.
1 orchestrator — comms-weekly
Marketing
7 skillsContent, social, SEO, email campaigns, competitor monitoring, weekly analytics.
1 orchestrator — marketing-weekly
QA
7 skillsE2E tests, API tests, performance, accessibility, test data, bug reports.
1 orchestrator — full-regression
Sales
7 skillsLead research, competitive analysis, proposals, outreach, RFPs, meeting prep.
1 orchestrator — outbound-sequence
Security
13 skillsScan, report, remediate. Secrets, dependencies, SAST/DAST, containers, SOC2.
2 orchestrators — full-security-audit, full-security-remediation
End-to-end flows, not just tools.
Orchestrators chain the task skills into a single auditable run — pre-commit gate, release audit, weekly comms cycle — and pass artifacts between steps. Every department ships at least one.
ship-feature
Use when a developer has written code for a single feature and wants a full pre-commit gate (tests generated, code reviewed, commit message drafted) in one pass. Chains test-writer, code-review, and commit-message end-to-end and produces a single report summarising the run.
chains: test-writer → code-review → commit-message
full-security-audit
Use when preparing for a release, a SOC2/PCI audit window, or any "sweep everything" security request. Chains secret-scanner, dependency-audit, security-audit, container-scan (if applicable), and pentest-report end-to-end and produces a single dated pentest report.
chains: secret-scanner → dependency-audit → security-audit → container-scan → pentest-report
release-to-prod
Use when a merged PR needs to be shipped to production end-to-end. Chains CI verification, canary deploy, SLO-driven auto-rollback, and changelog generation into a single auditable release run.
chains: pipeline-builder → deploy → incident-response → changelog
marketing-weekly
Use when running the marketing team's weekly content cycle end-to-end on a Mon-Fri cadence. Orchestrates competitor monitoring, long-form content, SEO, social, email, and analytics into a single weekly report.
chains: competitor-monitor → content-writer → seo-optimizer → social-media → email-campaign → analytics-report
See it ship real work.
Two worked walkthroughs in the repo — the exact prompt, the skill Claude matched, every file changed. No toy demos:
- Simple 101 — setup + first skill (15 min). Set up in Claude Code, VS Code, GitHub Copilot, or Codex CLI, then ship a
working FastAPI
/helloendpoint with one prompt. - Developers — full end-to-end (45 min). Nine skills, one real public repo (node-express-boilerplate), one shipped feature, one merged PR.