How do I install sdd-kit?

Install sdd-kit in your harness: Claude Code — /plugin marketplace add timpinard/sdd-kit; Any agent — npx skills@1.7.4 add timpinard/sdd-kit. Full step-by-step guidance is on the HOL plugin page.

How do I install sdd-kit in HOL Guard?

To install sdd-kit in HOL Guard, start with hol-guard plugin install timpinard/sdd-kit --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.

How do I install sdd-kit in Claude Code?

To install sdd-kit in Claude Code, start with /plugin marketplace add timpinard/sdd-kit. The complete step-by-step install guide for Claude Code is on the HOL plugin page.

How is the Trust Score for sdd-kit computed?

sdd-kit has a HOL Trust Score of 81 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/timpinard%2Fsdd-kit/trust

Who publishes sdd-kit?

sdd-kit is published by timpinard and listed on HOL.

sdd-kit

timpinard/sdd-kit · v0.4.0 · Development & Workflow

by timpinardOwner verifiedScan grade: GoodAwesome AI Plugins

Claude Code plugin for spec-driven development that grills decisions into specs, plans work in vertical slices, builds each task test-first with agents, and gates ADRs, specs, plans and merges on the owner

Install Source

Follow0

Trust Score81 Security scan89 Components8

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is sdd-kit a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

Claude Code

8 skills

Before you install

Sign-in: Not declared
Declared access: Not declared
License: MIT

Check before relying on it

Some security checks did not finish: Cisco skill scan. See the evidence

What is sdd-kit?

sdd-kit is a published development & workflow plugin for AI coding agents in the Claude Code ecosystem, developed by timpinard and distributed through the HOL AI plugin registry. Claude Code plugin for spec-driven development that grills decisions into specs, plans work in vertical slices, builds each task test-first with agents, and gates ADRs, specs, plans and merges on the owner.

Canonical slug: timpinard/sdd-kit
Version: v0.4.0 · updated Nov 2, 2026
Open data: entity.json (JSON-LD)

Registry snapshot

Repository: https://github.com/timpinard/sdd-kit
Canonical profile: https://hol.org/registry/plugins/timpinard%2Fsdd-kit
Owner verification: Verified on HOL as @timpinard
Marketplace source: .claude-plugin/marketplace.json
Scanner: HOL plugin scanner
Security result: Needs review
Digest verified: Yes

8 bundled skillsRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

On-Chain Verified

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability

100/100

Maintenance

65/100

MCP server setup

100/100

Plugin Security

89/100

Provenance

80/100

Publisher Quality

100/100

Provenance

Plugin root: .
Source repo: https://github.com/timpinard/sdd-kit
Source commit: da1f3b2f1c75…
Publisher verified: Yes
Owner verified: @timpinard
Agent Plugins 1.0: Not detected

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security posture

See how the Trust Score is computed

Needs review

Security result

Security score

High findings

Provider: codex-plugin-scanner
Grade: B · Good
Version: 3.24.2

codex:hol-plugin-scanner-8d5jFF / cisco-skill-scanner: failedcodex:hol-plugin-scanner-8d5jFF / cisco-mcp-scanner: skipped

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

16/16

6 checks

[claude:.] Operational Security

N/A

5 checks · not applicable

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

21/31

9 checks

[codex:.] Security

16/16

9 checks

[codex:.] Operational Security

N/A

5 checks · not applicable

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked 2026-10-30. This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

infomanifest-validationPLUGIN_JSON_RECOMMENDED_HOMEPAGE

The manifest is missing the documented recommended field "homepage".

Add "homepage" to strengthen the plugin manifest metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

1
Add the marketplace
Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.
claude code
2
Install the plugin
Installs the sdd-kit entry from the sdd-kit marketplace.
claude code
3
Scripted alternative
Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.
shell
4
Check it is installed
Lists installed plugins. The entry should appear as enabled.
shell

To remove it later, run claude plugin uninstall sdd-kit@sdd-kit.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "sdd-kit",
  "version": "0.4.0",
  "description": "Spec-driven development: grill, specify, plan in vertical slices, build test-first, review on two axes, with human gates at ADRs, specs, plans and merges.",
  "author": {
    "name": "Timothy Pinard"
  },
  "license": "MIT",
  "keywords": [
    "spec-driven",
    "process",
    "tdd",
    "code-review",
    "grilling"
  ],
  "repository": "https://github.com/timpinard/sdd-kit",
  "interface": {
    "displayName": "sdd-kit",
    "developerName": "timpinard"
  },
  "skills": "./",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL: https://github.com/timpinard/sdd-kit
Marketplace path: .claude-plugin/marketplace.json
Source path: .
Install policy: Unspecified

Skills

8 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

skills-cli

domain-docs
skills/domain-docs/SKILL.md
Keep the glossary and ADRs current as decisions are made. Use when a term is coined or challenged, a decision with lasting consequences is taken, or an ADR is written, accepted or superseded.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
epic
skills/epic/SKILL.md
Shape an epic with the product owner: problem, outcome, success measures and the capabilities that become specs.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
grilling
skills/grilling/SKILL.md
Interview the user relentlessly about a plan, request or design until every decision is settled. Use inside the epic, spec, plan and setup stages, or when the user asks to be grilled.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
plan
skills/plan/SKILL.md
Plan an approved spec as vertical slices with blocking edges, test boundaries and per-task gate commands, agreed with the owner.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
retro
skills/retro/SKILL.md
Run a retrospective - turn docs/kit-feedback.md and the metrics into decisions, and kit changes into a new sdd-kit release.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
setup
skills/setup/SKILL.md
Set up a repository for spec-driven development with sdd-kit, or migrate one from an older kit version. Run once per repo.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
spec
skills/spec/SKILL.md
Turn one epic capability (or a request) into a testable spec through a grilling session, then write it.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.
tdd
skills/tdd/SKILL.md
Test-driven development in red-green cycles at agreed test boundaries. Use when implementing a task, fixing a bug test-first, or writing tests for acceptance criteria.
Raw SKILL.md
SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

363 bytes

06e6acdf411aa27f…

.claude-plugin/plugin.json

file

359 bytes

d40c02809932bf1e…

.codex-plugin/plugin.json

plugin-manifest

516 bytes

7b0c8299c0bf8532…

agents/implementer.md

file

1,458 bytes

0f33d9c175fa25a9…

agents/qa-agent.md

file

1,011 bytes

48c41ddf676c708e…

agents/spec-reviewer.md

file

952 bytes

07250192a7423549…

agents/standards-reviewer.md

file

1,081 bytes

24a95a5a989574af…

LICENSE

file

1,428 bytes

4c45a45cfa58c32c…

README.md

file

3,740 bytes

54de0bd09912de36…

SECURITY.md

file

426 bytes

7e608b51459f67cd…

skills/domain-docs/adr-template.md

skill

196 bytes

371f7bed3f8d5ccc…

skills/domain-docs/SKILL.md

skill

1,769 bytes

b97145f7a6a47a6e…

skills/epic/epic-template.md

skill

577 bytes

787f13d9863d04c9…

skills/epic/SKILL.md

skill

1,106 bytes

d5231a8b05941421…

skills/grilling/SKILL.md

skill

1,536 bytes

eedfe5ecbb47be26…

skills/plan/plan-template.md

skill

729 bytes

3349944af1de9f58…

skills/plan/SKILL.md

skill

2,198 bytes

385760d42016e484…

skills/plan/tasks-template.md

skill

1,022 bytes

f039ed49b7f8f8af…

skills/retro/metrics.md

skill

1,391 bytes

9465a6531d77b607…

skills/retro/retro-template.md

skill

614 bytes

1705b9760d355318…

skills/retro/SKILL.md

skill

1,466 bytes

03516543d5949eff…

skills/setup/project/adr-0001-adopt-spec-driven-development.md

skill

607 bytes

97c6fc59c1d5b74f…

skills/setup/project/AGENTS.md

skill

1,264 bytes

c5bd7551611de049…

skills/setup/project/context/architecture.md

skill

237 bytes

dbe20cea554dc198…

skills/setup/project/context/conventions.md

skill

855 bytes

9253787ba59d8736…

skills/setup/project/context/glossary.md

skill

99 bytes

2772ea57e03deddc…

skills/setup/project/context/tracker.md

skill

2,116 bytes

1e26183d1565813f…

skills/setup/project/follow-ups.md

skill

177 bytes

224c5698fde0b1fe…

skills/setup/project/gates.sh

skill

1,913 bytes

cab4125f529a7353…

skills/setup/project/kit-feedback.md

skill

307 bytes

61d898f64aba220e…

skills/setup/SKILL.md

skill

3,006 bytes

a1cfefb4b8d72366…

skills/setup/version-check.md

skill

723 bytes

080dbf44297c8dd3…

skills/spec/SKILL.md

skill

2,890 bytes

652335d0afb87056…

skills/spec/spec-template.md

skill

1,143 bytes

7d68cc566e4a360a…

skills/tdd/SKILL.md

skill

1,966 bytes

1ee72195f149b3e9…

sdd-kit — Frequently asked questions

What is sdd-kit?: sdd-kit is an AI plugin in the HOL registry. Claude Code plugin for spec-driven development that grills decisions into specs, plans work in vertical slices, builds each task test-first with agents, and gates ADRs, specs, plans and merges on the owner.
How do I install sdd-kit?: Install sdd-kit in your harness: Claude Code — /plugin marketplace add timpinard/sdd-kit; Any agent — npx [email protected] add timpinard/sdd-kit. Full step-by-step guidance is on the HOL plugin page.
How do I install sdd-kit in HOL Guard?: To install sdd-kit in HOL Guard, start with hol-guard plugin install timpinard/sdd-kit --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install sdd-kit in Claude Code?: To install sdd-kit in Claude Code, start with /plugin marketplace add timpinard/sdd-kit. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How is the Trust Score for sdd-kit computed?: sdd-kit has a HOL Trust Score of 81 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/timpinard%2Fsdd-kit/trust
Who publishes sdd-kit?: sdd-kit is published by timpinard and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Claude Code official marketplaceNot listed
Plugins Anthropic maintains or selected for the marketplace Claude Code ships with.
Claude community directoryNot listed
Plugins submitted through claude.ai that passed Anthropic’s review; the list is a nightly mirror.
Codex curated marketplaceNot listed
Plugins OpenAI lists in the marketplace Codex ships with.
Cursor official pluginsNot in public list
Plugins Cursor publishes itself. Cursor does not publish its list of third-party Marketplace plugins.
Awesome Codex Plugins (HOL)Not listed
The community Codex plugin list HOL maintains on GitHub.

Lists last read Nov 3, 2026. HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here: <5; HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports: <10; Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces: <5; Workspaces that approved it or include it in an approved-plugin feed, as of today.
New GitHub stars: <5; From HOL's GitHub snapshots of the repository, 2026-10-25 to 2026-11-03.

Reviews and similar plugins

User reviews

No reviews yet. Write the first review

Is sdd-kit a fit?

Works with

Before you install

Check before relying on it

What is sdd-kit?

Registry snapshot

Trust and security

Trust & reputation

HOL Trust Score

Provenance

Security posture

Published advisories

Findings

Install guidance

Install in Claude Code

Did setup work in Claude Code?

Plugin manifest

Marketplace source

Skills

File inventory

sdd-kit — Frequently asked questions

Directory acceptance

Install signal

Related plugins

Alternatives in Development & Workflow

Reviews and similar plugins

User reviews

Similar plugins