LeeYudok/agents-scaffold
Fork-and-fill bootstrap for AI coding agents (Claude Code first, Codex/Gemini via AGENTS.md) — agents, skills, hooks, tiered rules (P0/P1/P2) and stack presets composed into one enforced pre-commit gate. 한국어/English
ARCHETYPE
Fort Knox
Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.
GUARDRAILS
4/5
Blocks destructive commands · Protects secrets · Pre-tool screening hook · No YOLO mode · details
Copy this rig
# review before running: this installs third-party code
$ npx degit LeeYudok/agents-scaffold/.claude ./rig-agents-scaffold # inspect, then merge into .claude/ MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit LeeYudok/agents-scaffold/.claude/skills/docs-sync .claude/skills/docs-sync $ npx degit LeeYudok/agents-scaffold/.claude/skills/example-skill .claude/skills/example-skill $ npx degit LeeYudok/agents-scaffold/.claude/skills/grill-me .claude/skills/grill-me $ npx degit LeeYudok/agents-scaffold/.claude/skills/handoff .claude/skills/handoff $ npx degit LeeYudok/agents-scaffold/.claude/skills/memory-factcheck .claude/skills/memory-factcheck $ npx degit LeeYudok/agents-scaffold/.claude/skills/review .claude/skills/review $ npx degit LeeYudok/agents-scaffold/.claude/skills/search-first .claude/skills/search-first $ npx degit LeeYudok/agents-scaffold/.claude/skills/security-precheck .claude/skills/security-precheck $ npx degit LeeYudok/agents-scaffold/.claude/skills/skill-evolve .claude/skills/skill-evolve $ npx degit LeeYudok/agents-scaffold/.claude/skills/status .claude/skills/status
$ curl -fsSL --create-dirs -o .claude/agents/agent-evolve.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/agent-evolve.md $ curl -fsSL --create-dirs -o .claude/agents/code-reviewer.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/code-reviewer.md $ curl -fsSL --create-dirs -o .claude/agents/db-migration.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/db-migration.md $ curl -fsSL --create-dirs -o .claude/agents/sdlc-developer.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/sdlc-developer.md $ curl -fsSL --create-dirs -o .claude/agents/sdlc-tester.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/sdlc-tester.md $ curl -fsSL --create-dirs -o .claude/agents/sdlc-verifier.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/sdlc-verifier.md $ curl -fsSL --create-dirs -o .claude/agents/security-audit.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/.claude/agents/security-audit.md $ curl -fsSL --create-dirs -o .claude/agents/agent-evolve.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/agent-evolve.md $ curl -fsSL --create-dirs -o .claude/agents/code-reviewer.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/code-reviewer.md $ curl -fsSL --create-dirs -o .claude/agents/db-migration.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/db-migration.md $ curl -fsSL --create-dirs -o .claude/agents/sdlc-developer.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/sdlc-developer.md $ curl -fsSL --create-dirs -o .claude/agents/sdlc-tester.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/sdlc-tester.md $ curl -fsSL --create-dirs -o .claude/agents/sdlc-verifier.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/sdlc-verifier.md $ curl -fsSL --create-dirs -o .claude/agents/security-audit.md https://raw.githubusercontent.com/LeeYudok/agents-scaffold/main/presets/lang-en/base/.claude/agents/security-audit.md
Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.
{
"permissions": {
"deny": [
"Read(.env)",
"Read(.env.*)",
"Bash(rm -rf *)",
"Bash(git push --force *)",
"Read(.env)",
"Read(.env.*)",
"Bash(rm -rf *)",
"Bash(git push --force *)"
]
},
"hooks": {
"PreToolUse": [
{
"matcher": "Bash",
"hooks": [
{
"type": "command",
"command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/pre-commit.sh"
},
{
"type": "command",
"command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/pre-commit.sh"
}
]
}
]
}
} Skills (10)
docs-syncexample-skillgrill-mehandoffmemory-factcheckreviewsearch-firstsecurity-precheckskill-evolvestatus
Subagents (14)
| agent-evolve model: opus | 다른 서브에이전트를 실제로 써본 후 피드백을 받아 해당 agents/*.md를 자동 개선하는 메타 에이전트. 에이전트가 틀렸거나, 결과가 부실하거나, description이 실제 동작과 안 맞을 때, 또는 새로 배운 함정을 기록할 때 호출. |
| code-reviewer model: sonnet | 머지 전 코드 변경을 버그·보안·품질 관점으로 리뷰. CRITICAL 발견 시 차단 권고. |
| db-migration model: sonnet | DB 스키마 변경 안전성 검증. ALTER TABLE 전 위험도 평가·롤백 SQL 생성·FK 정합성 체크. 마이그레이션 파일 추가·수정 시 호출. |
| sdlc-developer model: sonnet | 기획서/이슈 기준 최소 스코프 구현 전담. 테스트 작성·실행은 하지 않음(sdlc-tester 담당). /sdlc-cycle 커맨드의 개발 단계 서브에이전트. |
| sdlc-tester model: sonnet | 이슈의 AC/TC 기준 테스트 코드 작성 전담. 구현 코드 수정·테스트 실행은 하지 않음(sdlc-verifier 담당). /sdlc-cycle 커맨드의 테스트 단계 서브에이전트. |
| sdlc-verifier model: sonnet | 빌드·테스트 파이프라인 실행 후 통과/실패 보고 전담. 코드 절대 수정 금지. /sdlc-cycle 커맨드의 검증 단계 서브에이전트. |
| security-audit model: haiku | P0 보안 규칙 자동 스캔. 하드코딩 시크릿·평문 비밀번호·민감정보 노출·인증 누락 등 코드 12항목 + 에이전트 설정(.claude/훅/MCP/permissions/프롬프트 인젝션) 8항목 grep 기반 검사. 보안 리뷰 요청 시 호출. |
| agent-evolve model: opus | Meta-agent that revises other subagent definitions under .claude/agents/*.md based on feedback from actually using them. Invoke when a subagent got something wrong, produced a poor result, its descrip |
| code-reviewer model: sonnet | Reviews code changes before merge for bugs, security, and quality. Recommends blocking merge if any CRITICAL finding surfaces. |
| db-migration model: sonnet | Verifies DB schema change safety. Assesses risk before ALTER TABLE, generates rollback SQL, checks FK consistency. Invoke when migration files are added or modified. |
| sdlc-developer model: sonnet | Owns minimum-scope implementation based on the spec/issue. Does not write or run tests (owned by sdlc-tester). Development-stage subagent for the /sdlc-cycle command. |
| sdlc-tester model: sonnet | Owns writing test code against the issue's AC/TC. Does not modify implementation code or run tests (owned by sdlc-verifier). Test-stage subagent for the /sdlc-cycle command. |
| sdlc-verifier model: sonnet | Owns running the build/test pipeline and reporting pass/fail. Never modifies code. Verification-stage subagent for the /sdlc-cycle command. |
| security-audit model: haiku | Automated scan of P0 security rules. grep-based checks across 12 code items (hardcoded secrets, plaintext passwords, sensitive data exposure, missing auth, etc.) + 8 agent-configuration items (.claude |
Hooks (12)
| event | matcher | runs |
|---|---|---|
| PreToolUse | Bash | ${CLAUDE_PROJECT_DIR}/.claude/hooks/pre-commit.sh |
| PostToolUse | Edit|Write | ${CLAUDE_PROJECT_DIR}/.claude/hooks/post-edit-format.sh |
| PostToolUse | Bash | ${CLAUDE_PROJECT_DIR}/.claude/hooks/post-test-notify.sh |
| PostToolUse | Bash|Edit|Write | ${CLAUDE_PROJECT_DIR}/.claude/hooks/observe-lite.sh |
| PreCompact | * | 컨텍스트 압축이 시작됩니다. 압축 전, 진행 중인 작업에서 재진입에 필요한 사실(완료/진행/다음 단계, 주요 결정과 근거, 차단 요소, 관련 이슈·브랜치·파일)을 정리해 보존하십시오. - 세션 간 지속이 필요한 비자명 사실은 `.claude/memory/` 에 타입접두(project_/feedback_/reference_) 메모리로 기록하고 `MEMORY.md` 인덱스에 한 줄 추가. - 코드/git 으로 드러나는 사실은 기 |
| Stop | * | ${CLAUDE_PROJECT_DIR}/.claude/hooks/stop-memory-remind.sh |
| PreToolUse | Bash | ${CLAUDE_PROJECT_DIR}/.claude/hooks/pre-commit.sh |
| PostToolUse | Edit|Write | ${CLAUDE_PROJECT_DIR}/.claude/hooks/post-edit-format.sh |
| PostToolUse | Bash | ${CLAUDE_PROJECT_DIR}/.claude/hooks/post-test-notify.sh |
| PostToolUse | Bash|Edit|Write | ${CLAUDE_PROJECT_DIR}/.claude/hooks/observe-lite.sh |
| PreCompact | * | Context compaction is about to start. Before it does, capture and preserve the facts needed to re-enter the current work (done/in-progress/next steps, key decisions and their rationale, blockers, related issues/branches/files). - Any non-t |
| Stop | * | ${CLAUDE_PROJECT_DIR}/.claude/hooks/stop-memory-remind.sh |
Slash commands (16)
/fix-issue/knowledge-graph/sdlc-cycle/sonar/fix-issue/sdlc-cycle/fix-issue/sdlc-cycle/fix-issue/knowledge-graph/sdlc-cycle/sonar/fix-issue/sdlc-cycle/fix-issue/sdlc-cycle
Permissions
deny (8)
Read(.env)
Read(.env.*)
Bash(rm -rf *)
Bash(git push --force *)
Read(.env)
Read(.env.*)
Bash(rm -rf *)
Bash(git push --force *)
ask (0)
—
allow (0)
—
