dev-agent-runtime — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dev-agent-runtime (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="assets/readme-hero.png" alt="Dev Agent OPC hero banner" width="100%"> </p>
<h1 align="center">Dev Agent OPC</h1>
<p align="center"> <strong>Automatic Dev Agent from idea → spec → design → build → QA → ship</strong> <br> <strong>面向 OPC 与小型业务团队的精简自动化开发 Agent 工作流</strong> </p>
<p align="center"> <a href="#中文">中文</a> · <a href="#english">English</a> · <a href="#使用方式">使用方式</a> · <a href="#usage">Usage</a> </p>
<p align="center"> <a href="#发布日志"><img alt="Version" src="https://img.shields.io/badge/version-v0.7-blue.svg"></a> <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-green.svg"></a> <a href="DEV_FLOW.md"><img alt="Dev Agent Runtime" src="https://img.shields.io/badge/dev--agent-runtime-111827.svg"></a> <img alt="Lean Flow" src="https://img.shields.io/badge/lean-flow-f97316.svg"> <img alt="QA Optional" src="https://img.shields.io/badge/QA-optional-14b8a6.svg"> </p>
<p align="center"> 由 <strong>Kevin KE / laoke.ai</strong> 创建和维护，并与 <strong>Codex-5.5</strong> 协作完成。 <br> Created and maintained by <strong>Kevin KE / laoke.ai</strong>, worked with <strong>Codex-5.5</strong>. </p>
Dev Agent OPC 是一套给 AI Coding Agent 使用的精简交付工作流。它把模糊想法推进到可验证输出：idea → spec → design → build → QA → ship。其中 QA 和 ship 默认可选，重点是先高效完成正确的 build 输出，再按需要增加质量证明和发布检查。
安装后，从主入口开始：
/dev agent常见调用：
/dev agent 帮我把这个产品想法梳理成 PRD 和 SPEC，然后进入 build。
/dev agent 这是一个 UI 项目，先检查 design 是否足够支持高保真实现。
/dev agent next my-project
/dev agent flow build my-project
/dev agent flow qa my-projectbin/dev-flow 是唯一执行导航器。已有项目不要先通读 Markdown；先运行：
bin/dev-flow status <project-name>
bin/dev-flow next <project-name>然后只读取 next 返回的 command、skill、references 和项目文件。
本地使用：
bin/dev-flow init <project-name> --type ui
bin/dev-flow status <project-name>
bin/dev-flow next <project-name>
bin/dev-flow autonomy <project-name>
bin/dev-flow delegate <project-name>
bin/dev-flow ui-polish <project-name>
bin/dev-flow phase <project-name> spec "Write PRD and SPEC"
bin/dev-flow phase <project-name> build "Build the first slice"git clone https://github.com/KevinKE93/Dev_Agent_OPC.git
cd Dev_Agent_OPC
bin/dev-flow install codex --scope user
bin/dev-flow install claude-code --scope user支持的 host：codex、claude-code、gemini、openclaw、opencode。
更新：
cd "/path/to/Dev_Agent_OPC"
git pull --ff-only
bin/dev-flow install codex --scope user
bin/dev-flow install claude-code --scope user.dev-agent/ 存放 spec、design、tasks、reviews 等过程文件；项目根目录存放真实代码、配置和开发产物。design-artifacts 中的 HTML/CSS design package 合同为准，用高保真 HTML/CSS 和必要的 CSS/JS/Lottie 动效作为实现目标，提高还原度、验收效率和代码生成效率。design-check；没有参考时需用户委托视觉方向或提供参考；logo、app icon、品牌 KV 和高质量位图素材必须有 Image Gen / GPT Image 来源。HOST_REQUIREMENTS.md，不混入项目 runtime。AUTONOMY_LOOP 默认给出 heartbeat 建议；遇到 blocker、高风险审批或最终阶段已验证时停止。SUBAGENTS 默认给出可并行任务包；host 支持时可把 explorer、worker、verifier 等侧线任务交给子 agent。UI_DEBT.md 后继续推进。AUTOMATED_QA="required" 开启功能/monkey QA；VISUAL_QA="required" 开启视觉 QA。v0.9：新增 HTML/CSS 设计稿实现方式作为正式设计交付标准，提升 UI 还原度、验收效率和代码生成效率；优化未初始化项目的目录创建，避免在项目根目录生成空的过程文件夹。v0.8：新项目默认把过程管理文件放在 .dev-agent/，开发产出的代码和项目文件保留在项目根目录；migrate 可迁移旧 .dev-flow / root-level 过程目录。v0.7：强化 idea/spec 工作流；idea brief 增加需求归因表；Spec 明确 PRD 与 SPEC 分工、产品域展开清单、外部参考吸收规则，并为 UI 项目增加最小 spec 覆盖门禁。v0.6：收敛为 idea → spec → design → build → QA → ship；Spec 合并 PRD 和 agent contract；Build 合并轻量计划与 proof-first；QA/Ship 默认可选；移除默认 PDCA 支流。v0.5：支持 native 安装，并可在对话中通过 /dev agent 直接调用 Dev Agent；稳定 ID 为 dev-agent，保留 /dev-agent 作为兼容别名。v0.4：增加 schema v4、可选 QA/Ship、正式设计资产按需门禁，以及 AGENT_CONTRACT。v0.3：增加宿主机环境合同、env-check、schema v3，以及 host SDK / project dependency / runtime artifact 的边界。Dev Agent OPC is a lean delivery workflow for AI coding agents. It moves rough ideas into verifiable output through idea → spec → design → build → QA → ship. QA and ship are optional by default, so the workflow can reach correct build output quickly before adding heavier validation or launch work.
Installed entrypoint:
/dev agentExamples:
/dev agent Turn this product idea into PRD + SPEC, then continue to build.
/dev agent This is a UI project. Check whether design is enough for high-fidelity implementation.
/dev agent next my-project
/dev agent flow build my-project
/dev agent flow qa my-projectbin/dev-flow is the only execution navigator. For an existing project, do not start by reading Markdown broadly. Run:
bin/dev-flow status <project-name>
bin/dev-flow next <project-name>Then read only the command, skill, references, and project files named by next.
Local commands:
bin/dev-flow init <project-name> --type ui
bin/dev-flow status <project-name>
bin/dev-flow next <project-name>
bin/dev-flow autonomy <project-name>
bin/dev-flow delegate <project-name>
bin/dev-flow ui-polish <project-name>
bin/dev-flow phase <project-name> spec "Write PRD and SPEC"
bin/dev-flow phase <project-name> build "Build the first slice"git clone https://github.com/KevinKE93/Dev_Agent_OPC.git
cd Dev_Agent_OPC
bin/dev-flow install codex --scope user
bin/dev-flow install claude-code --scope userSupported hosts: codex, claude-code, gemini, openclaw, opencode.
Update:
cd "/path/to/Dev_Agent_OPC"
git pull --ff-only
bin/dev-flow install codex --scope user
bin/dev-flow install claude-code --scope user.dev-agent/ stores process files such as specs, design, tasks, and reviews; the project root stores real code, config, and development output.design-artifacts; high-fidelity HTML/CSS plus CSS/JS/Lottie motion files are the preferred implementation target for better UI fidelity, review speed, and code-generation efficiency.design-check before build; missing references require user input or delegated visual direction; logo, app icon, brand KV, and high-quality bitmap assets require Image Gen / GPT Image provenance.HOST_REQUIREMENTS.md instead of project runtime output.AUTONOMY_LOOP suggests heartbeat continuation by default, and stops on blockers, high-risk approval, or verified final phases.SUBAGENTS suggests optional task packets so host clients can delegate explorer, worker, and verifier work when supported.UI_DEBT.md and work advances.AUTOMATED_QA="required" enables functional/monkey QA; VISUAL_QA="required" enables visual QA.v0.9: Adds HTML/CSS design packages as the formal design handoff format to improve UI fidelity, review efficiency, and code-generation efficiency; fixes directory creation for uninitialized projects so empty process folders are not created at the project root.v0.8: Defaults process-management files to .dev-agent/ while keeping development output and source files at the project root; migrate can move old .dev-flow and root-level process directories.v0.7: Strengthens the idea/spec workflow; adds requirement attribution to idea briefs; clarifies PRD/SPEC ownership, product-domain expansion, external-reference absorption, and minimum UI spec coverage gates.v0.6: Collapses the lifecycle to idea → spec → design → build → QA → ship; folds PRD and agent contracts into Spec; folds micro-planning and proof-first checks into Build; makes QA/Ship optional by default; removes the default PDCA branch.v0.5: Adds native installation and conversation-level invocation through /dev agent; the stable ID is dev-agent, with /dev-agent kept as a compatibility alias.v0.4: Adds schema v4, optional QA/Ship gates, demand-driven formal design assets, and AGENT_CONTRACT.v0.3: Adds the host environment contract, env-check, schema v3, and clear boundaries between host SDKs, project dependencies, and runtime artifacts.MIT. See LICENSE.
Based on and extending @AddyOsmani Agent Skills.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.