sdlc-team-security

Table of Contents

• AI-First SDLC Practices
  • Setup
    • Plugin Install (Recommended)
    • Available Plugins
    • Available Skills
    • Agent-Based Setup (Pre-release / Development)
    • Script-Based Setup (Legacy)
  • How It Works
    • Rules
    • Validation
    • Agents
  • Documentation
    • Agent Development
  • Integration Testing
  • Known Limitations
  • Zero Technical Debt Policy
  • Development
    • Using the Framework (Your Project)
    • Developing the Framework (This Repo)
    • Current Version: 1.8.0
  • Contributing
  • License

AI-First SDLC Practices

A framework for integrating AI agents as primary developers while maintaining quality and process compliance. Provides specialist agents, validation tools, enforcement rules, and workflow skills for zero-technical-debt development.

Setup

Plugin Install (Recommended)

Install the plugin family from the Claude Code marketplace. This is the standard approach for using the framework in your projects.

Step 1: Add the marketplace and install the core plugin

/plugin marketplace add SteveGJones/ai-first-sdlc-practices
/plugin install sdlc-core@ai-first-sdlc

Step 2: Configure your team

/sdlc-core:setup-team

This presents project types (Full-stack, AI/ML, Cloud, API, Security, Custom) and installs the matching team plugins. For example, a full-stack web app installs:

Plugin	Description
sdlc-core	Rules, validators, enforcement, workflows (always installed)
sdlc-team-common	Solution architect, research agent, performance engineer, database architect
sdlc-team-fullstack	Frontend, backend, API, DevOps architects

Step 3: Start working

/sdlc-core:new-feature 1 my-feature "Description of the feature"

Available Plugins

Plugin	Description
sdlc-core	Rules, validators, enforcement, workflows (always install)
sdlc-team-common	Cross-cutting architects, researchers, performance engineers
sdlc-team-ai	AI/ML specialists — architects, prompt engineers, RAG designers
sdlc-team-fullstack	Frontend, backend, API, DevOps architects
sdlc-team-cloud	Cloud, container, SRE specialists
sdlc-team-security	Security, compliance, privacy specialists
sdlc-team-pm	Agile coach, delivery manager, progress tracking
sdlc-team-docs	Technical writer, documentation architect
sdlc-lang-python	Python-specific validation, patterns, expert agent
sdlc-lang-javascript	JavaScript/TypeScript validation and patterns

Available Skills

Skill	Description
/sdlc-core:validate	Run validation pipeline (--syntax, --quick, --pre-push)
/sdlc-core:new-feature	Create feature proposal, retrospective, and branch
/sdlc-core:commit	Validated commit with test execution
/sdlc-core:pr	Full validation + PR creation
/sdlc-core:setup-team	Configure team formation for your project
/sdlc-core:setup-ci	Generate GitHub Actions workflow
/sdlc-core:release-plugin	Package source into plugins

Agent-Based Setup (Pre-release / Development)

For testing unreleased agents or contributing to the framework, install agents directly from the repository. This approach gives you access to agents before they're published as plugins.

# Download the setup orchestrator
curl -s https://raw.githubusercontent.com/SteveGJones/ai-first-sdlc-practices/main/agents/v3-setup-orchestrator.md > v3-setup-orchestrator.md
mkdir -p .claude/agents && mv v3-setup-orchestrator.md .claude/agents/

# Restart Claude Code, then:
# "Use the v3-setup-orchestrator agent to set up AI-First SDLC for my project"

The orchestrator interviews you about your project and downloads only the agents you need. Use this approach when:

• You want agents that haven't been released as plugins yet
• You're contributing to the framework and testing changes
• You need a custom agent selection not covered by the plugin team presets

Script-Based Setup (Legacy)

The original Python script approach. Still functional but superseded by the plugin system.