settings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited settings (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="assets/banner.png" alt="Worclaude: The Workflow Layer for Claude Code" width="100%" /> </p>
<p align="center"> <a href="https://www.npmjs.com/package/worclaude"><img src="https://img.shields.io/npm/v/worclaude" alt="npm version" /></a> <a href="https://www.npmjs.com/package/worclaude"><img src="https://img.shields.io/npm/dm/worclaude" alt="downloads" /></a> <a href="https://github.com/sefaertunc/Worclaude/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/sefaertunc/Worclaude/ci.yml?label=tests" alt="tests" /></a> <a href="LICENSE"><img src="https://img.shields.io/github/license/sefaertunc/Worclaude" alt="license" /></a> <img src="https://img.shields.io/badge/node-%3E%3D20-brightgreen" alt="node >= 20" /> <img src="https://img.shields.io/badge/built%20for-Claude%20Code-cc785c" alt="Built for Claude Code" /> </p>
<p align="center"> <a href="https://github.com/sponsors/sefaertunc"><img src="https://img.shields.io/badge/GitHub%20Sponsors-support-ea4aaa?logo=githubsponsors&style=for-the-badge" alt="GitHub Sponsors" height="40" /></a> <a href="https://buymeacoffee.com/sefaertunc"><img src="https://img.shields.io/badge/Buy%20Me%20a%20Coffee-support-yellow?logo=buymeacoffee&style=for-the-badge" alt="Buy Me a Coffee" height="40" /></a> </p>
<p align="center"> <a href="https://sefaertunc.github.io/Worclaude/">Documentation</a> · <a href="https://www.npmjs.com/package/worclaude">npm</a> · <a href="https://github.com/sefaertunc/Worclaude/issues">Issues</a> </p>
Worclaude scaffolds a complete Claude Code workflow into any project in seconds. One init command installs 25 agents, 16 slash commands, 17 skills, an 11-event hook layer, local observability capture, a five-layer memory system, and a CLAUDE.md template tuned for your tech stack. It implements the patterns in howborisusesclaudecode.com as a reusable, upgradable scaffold, so you stop rebuilding the same configuration for every new project.
<div align="center">
| CLI Commands | Agents | Slash Commands | Skills | Hooks | Tech Stacks |
|---|---|---|---|---|---|
| 14 | 6 universal + 19 optional | 16 | 17 | 11 events | 16 |
| subcommands | across 6 categories | session tools | universal + templates | 7 hook scripts | auto-detected |
</div>
worclaude init installs a production-ready Claude Code workflow:
Session lifecycle, review, verification, memory, observability, and git automation:
/start /end /commit-push-pr /review-plan /verify /compact-safe /update-claude-md /learn /setup /sync /conflict-resolver /review-changes /build-fix /refactor-clean /test-coverage /observability
/setup: backend-conventions, frontend-design-system, project-patternsSkills use Claude Code's directory format (skill-name/SKILL.md) and support conditional activation via path globs, so Claude only carries knowledge relevant to the current file.
Worclaude scaffolds 14 hook entries across 11 Claude Code events:
pre-compact-save.cjs)[LEARN] blocks from the transcript and persists them (learn-capture.cjs).claude/observability/skill-loads.jsonl (obs-skill-loads.cjs).claude/observability/agent-events.jsonl (obs-agent-events.cjs)Three profiles via WORCLAUDE_HOOK_PROFILE: minimal (context hooks only; disables observability and notifications), standard (all hooks, default), strict (standard + TypeScript checking on every edit).
A privacy-first per-project signal layer captures skill loads, command invocations, and agent timings to .claude/observability/*.jsonl (gitignored). The worclaude observability CLI and /observability slash command aggregate the signals into a Markdown report: top skills, top commands, agent failure rates, and anomalies. Zero data leaves the machine; opt out via WORCLAUDE_HOOK_PROFILE=minimal or by deleting the folder.
When worclaude init finishes it offers to surface Claude Code's /install-github-action flow. If installed, @claude mentions in PR comments will automatically propose CLAUDE.md updates, slotting cleanly into the /sync-driven release flow. Worclaude itself never shells out to the install command; it just points you at it.
A personal, gitignored store at .claude/learnings/ captures corrections and rules Claude picks up mid-session and replays them at the start of future sessions. The correction-detect.cjs and learn-capture.cjs hooks do this automatically; the /learn slash command is the explicit capture path. Unlike CLAUDE.md (shared rules, in git), learnings are yours; useful for personal conventions that should not leak into the repo. Promote a learning to CLAUDE.md when it matures into something every contributor should follow.
AGENTS.md is scaffolded alongside CLAUDE.md as a single source of truth for Cursor, Codex, GitHub Copilot, and other AI coding tools that expect AGENTS.md. Switching tools does not require maintaining parallel rule files.
worclaude doctor runs a four-category health check: core files (workflow-meta, CLAUDE.md, settings.json), components (agents, commands, skills, agent-routing), documentation (PROGRESS.md, SPEC.md), and integrity (file hashes, hook-event validity, deprecated models, CLAUDE.md line budget, learnings index integrity, gitignore coverage). Every check reports PASS/WARN/FAIL with actionable diagnostics.
Pre-configured permissions per tech stack (Node.js, Python, Go, Rust, and 12 more), a CLAUDE.md template with progressive disclosure via skills, sandbox / effort / output defaults out of the box.
npx worclaude initOr install globally:
npm install -g worclaude
cd your-project
worclaude initFollow the interactive prompts to select your project type, tech stack, and agents. Then open Claude Code and run /setup to fill in your project-specific content.
For parallel tasks, launch Claude with worktrees:
claude --worktree --tmux| Command | Description |
|---|---|
worclaude init | Scaffold workflow into new or existing project |
worclaude upgrade | Update universal components and repair on-disk drift |
worclaude status | Show current workflow state, version, and npm update status |
worclaude backup | Create a timestamped backup of workflow files |
worclaude restore | Restore from a previous backup |
worclaude diff | Compare current setup vs latest template |
worclaude delete | Remove worclaude workflow from project |
worclaude doctor | Validate workflow installation health |
worclaude doc-lint | Validate <!-- references … --> markers; surface tech-stack drift |
worclaude observability | Aggregate per-project signals into a Markdown report (--json, --out) |
worclaude regenerate-routing | Rebuild agent-routing/SKILL.md from templates/agents/ |
worclaude scan | Detect project type/stack via the project-scanner detectors |
worclaude setup-state | Inspect / save / reset / resume /setup interview persistence |
worclaude worktrees clean | Remove stale agent worktrees (locked or orphaned) |
The init command detects existing setups and merges intelligently; no data is overwritten without your confirmation. Use upgrade to pull in new features, restore missing files, and preserve your customizations. upgrade accepts --dry-run, --yes, and --repair-only for scripted flows. doctor accepts --json for CI dashboards. doc-lint accepts --strict to exit non-zero on drift (CI-friendly).
See the full command reference for detailed usage and options.
.claude/learnings/ (gitignored); shared rules live in CLAUDE.md.AGENTS.md generated from the same source as CLAUDE.md, so your rules work in Cursor / Codex / Copilot too.minimal for CI, standard for daily work, strict for type-heavy projects.Version bump: {major|minor|patch|none} in its body; /sync aggregates declarations across merged PRs and only cuts a release when at least one rises above none. Internal-only work (docs, CI, tests) accumulates on develop without triggering noisy publishes.Worclaude draws from patterns and insights across the Claude Code ecosystem:
Built on Boris Cherny's Claude Code tips. MIT licensed.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.