vbounce

A workflow manager for V-Bounce, a structured software development process with phases for requirements, design, contracts, implementation, review, and deployment.

In plain words
What is it for?
Use it to start or manage a V-Bounce development cycle, track its state, run test-driven implementation, and validate work between phases.
Why use it?
It coordinates specialized coding agents, shared project files, phase changes, and checks that each phase has the required inputs and outputs.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/baodq97/open-plugin/vbounce
Any agent
npx skills add baodq97/open-plugin --skill vbounce
Clone the repo
git clone --depth 1 https://github.com/baodq97/open-plugin

Made for: Claude Code, Codex.

Per session 177 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,163 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00177 $0.06163
Opus 5 $0.00088 $0.03082
Sonnet 5 $0.00035 $0.01233
Haiku 4.5 $0.00018 $0.00616

Measured 2d ago against content hash 61ae1e5a9da0, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

vbounce scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/vbounce/skills/vbounce/SKILL.md · 466 lines

How it starts

The opening of the file, as written. The whole thing — 466 lines — stays where its author put it; the contents beside it link to each section on GitHub.

V-Bounce SDLC Orchestrator v5.1

Agent-first SDLC framework with explicit contracts, shared workspace, state management, unified TDD, and per-phase specialized QG agents.

Based on arXiv 2408.03416 (Hymel, 2024): AI handles implementation, humans shift to validators/verifiers.

Core Principles

  1. Agent-First — agents are the execution units; orchestrator manages state and contracts
  2. Explicit Contracts — every agent declares input/output files with validation patterns
  3. Shared Workspace — all artifacts live in .vbounce/cycles/{cycle_id}/
  4. State Machine — orchestrator reads/writes state.yaml, determines next action
  5. Multi-Layer QA — input validation, output validation, semantic QG, cross-agent compatibility
  6. 7-Activity Phase Anatomy — see references/phase-anatomy.md
  7. Technology-Aware — detect project tech stack and inject framework context into all agent dispatches

Cycle Initialization

When the user provides a PRD or says "start vbounce cycle":

  1. Generate cycle ID: CYCLE-{PROJECT}-{YYYYMMDD}-{SEQ} (derive PROJECT from directory name, SEQ starts at 001)
  2. Create workspace: mkdir -p .vbounce/cycles/{cycle_id}/{requirements,design,contracts,implementation,review,deployment,knowledge,quality-gates}
  3. Copy PRD: Write/copy the user's PRD to .vbounce/cycles/{cycle_id}/prd.md
  4. Tech Stack Detection: Scan the project for manifest files to detect the tech stack:
    • Check in order: package.json (JS/TS), pyproject.toml / requirements.txt (Python), *.csproj (C#), go.mod (Go), Cargo.toml (Rust), pom.xml / build.gradle (Java/Kotlin)
    • Read CLAUDE.md for explicit tech stack declarations (overrides auto-detection)
    • If no manifest found, scan top 5 source files for import patterns and file extensions
    • Write {workspace}/tech-context.yaml with: language, runtime, package_manager, frameworks (list of {name, version, role}), build_tool, install_command, compile_command, test_command, source_dirs, test_dirs, detected_from
    • Resolve install/compile/test commands per language + package manager — see references/tech-stack-commands.md
  5. Framework Context Loading: Based on tech-context.yaml, check for relevant installed skills:
    • For each detected framework, search installed skills for matching trigger phrases (skill descriptions contain framework names)
    • If match found, read that skill's SKILL.md + key reference files
    • Extract: framework patterns, testing conventions, security considerations, known anti-patterns
    • Always check: hallucination-patterns.md for entries matching detected ecosystem, coding-standards.md for detected language, CLAUDE.md for project-specific conventions
    • If no skill matches any detected framework, graceful degradation: agents work without framework context (tech-context-prompt.md will only contain language + framework names + versions)
    • Write {workspace}/tech-context-prompt.md with: primary stack info, key patterns, known hallucination risks, testing conventions
  6. Initialize state: Write .vbounce/cycles/{cycle_id}/state.yaml with v5.1 state schema (all phases including contracts set to not_started, current_phase: requirements, anatomy_step: input, tech_context populated from detection)
  7. Set active cycle: Write .vbounce/state.yaml with just active_cycle: {cycle_id} and workspace: .vbounce/cycles/{cycle_id}
  8. Proceed: Begin requirements phase (validate input contract, dispatch requirements-analyst)

Read the full file on GitHub · 466 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 466 lines · 177 tokens per session scan A 61ae1e5a9da0

Subscribe to this mod's changes

vbounce is a skill published in the GitHub repository baodq97/open-plugin (4 stars, last pushed 3mo ago), licensed MIT. It adds 177 tokens to every session and 6,163 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

brainstorm-okrs

Brainstorm team-level OKRs aligned with company objectives — qualitative objectives with measurable key results. Use when setting quarterly OKRs, aligning team goals with company strategy, drafting objectives, or learning how to write effective OKRs.

phuryn/pm-skills · 49 tokens

pre-mortem

Run a pre-mortem risk analysis on a PRD or launch plan. Categorizes risks as Tigers (real problems), Paper Tigers (overblown concerns), and Elephants (unspoken worries), then classifies as launch-blocking, fast-follow, or track. Use when preparing for launch, stress-testing a product plan, or identifying what could go…

phuryn/pm-skills · 79 tokens

ab-test-analysis

Analyze A/B test results with statistical significance, sample size validation, confidence intervals, and ship/extend/stop recommendations. Use when evaluating experiment results, checking if a test reached significance, interpreting split test data, or deciding whether to ship a variant.

phuryn/pm-skills · 54 tokens

dummy-dataset

Generate realistic dummy datasets for testing with customizable columns, constraints, and output formats (CSV, JSON, SQL, Python script). Use when creating test data, building mock datasets, or generating sample data for development and demos.

phuryn/pm-skills · 48 tokens

outcome-roadmap

Transform an output-focused roadmap into an outcome-focused one that communicates strategic intent. Rewrites initiatives as outcome statements reflecting user and business impacts. Use when shifting to outcome roadmaps, making a roadmap more strategic, or rewriting feature lists as outcomes.

phuryn/pm-skills · 53 tokens

release-notes

Generate user-facing release notes from tickets, PRDs, or changelogs. Creates clear, engaging summaries organized by category (new features, improvements, fixes). Use when writing release notes, creating changelogs, announcing product updates, or summarizing what shipped.

phuryn/pm-skills · 57 tokens