Team — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Team (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Score rose 13 points between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
A Claude Code plugin that orchestrates specialized agents to autonomously implement entire features end-to-end, driven by the QRSPI workflow. The orchestrator is the main Claude Code session; it persists pipeline state as artifacts in docs/plans/ and tracks live progress with TodoWrite.
📖 Documentation: team.bostonaholic.dev
Each agent does work and returns an artifact. The orchestrator dispatches the next agent based on a phase table. Agents remain decoupled — they know nothing about each other.
WORKTREE → QUESTION → RESEARCH → DESIGN → STRUCTURE → PLAN → IMPLEMENT → PRdocs/plans/<id>/ inside it, keeping the home checkout's git status clean for the whole run.task.md) and neutral research questions (questions.md). The questioner is the only agent that ever sees the user's original description.questions.md. They never see the task. This structurally prevents opinion-bias in research findings./team Add rate limiting middleware to all API endpointsFor well-understood bugs, skip the QRSPI ceremony:
/team-fix Users see stale cache after profile updateOr run individual phases:
/team-worktree docs/plans/<id>/
/team-question Add rate limiting middleware to all API endpoints
/team-research docs/plans/<id>/
/team-design docs/plans/<id>/
/team-structure docs/plans/<id>/
/team-plan docs/plans/<id>/
/team-implement docs/plans/<id>/
/team-pr docs/plans/<id>/In a full /team run the home worktree is created automatically at the leading WORKTREE phase. Invoked standalone, /team-worktree consumes plan.md (post-PLAN) — use it for manual recovery or multi-repo setup.
Each downstream command takes the artifact directory docs/plans/<id>/ as its argument.
claude plugin add /path/to/teamSee docs/architecture.md for the full architecture, the artifact frontmatter schema, and the phase-inference rules.
agents/ — decoupled workers that read predecessor artifacts from docs/plans/ and write their outputs thereskills/ — slash commands, the standalone /shipit land utility, and shared methodologieshooks/ — safety guards and docs/plans/-aware compaction resilienceskills/team/registry.json — phase-tagged inventory of the 13 agentsdocs/plans/<id>/*.md — <id> is <TICKET>-<topic> or <YYYY-MM-DD>-<topic>. Each artifact carries YAML frontmatter (topic, date, phase; gated artifacts also carry approved, approved_at, revision). Live in-session coordination uses TodoWrite.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.