yd-sdlc-orchestrator

yd-sdlc-orchestrator is a skill for Claude Code from LeeYudok/agents-scaffold. It costs 90 tokens per session (2,145 once invoked), scanned A, original, MIT.

A coordinator for a software project workflow that passes a broad product request through planning, implementation, and security checks. It delegates each stage to other coding-agent skills and only advances when required checks pass.

In plain words
What is it for?
Use it to coordinate the planning and implementation of a service or app, pass outputs between specialist agents, run validation, and prepare a local deployment.
Why use it?
It turns a vague request into an ordered development process instead of mixing planning, coding, and review together. Quality gates help catch problems between stages.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: reads .claude/ paths; mentions subagents.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is python3 .claude/skills/yd-nextjs-implementer/scripts/validate_traceability.py \.

Part of the yd-skills-personal plugin — 9 skills shipped together

Good fit Use it to coordinate the planning and implementation of a service or app, pass outputs between specialist agents, run validation, and prepare a local deployment.

Compare 6 skills from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/LeeYudok/agents-scaffold
agentmods
npx agentmods add skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator

Made for: Claude Code.

Or install yd-skills-personal, the plugin that ships this one along with the rest of its 9 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for yd-sdlc-orchestrator

README.md
[![agentmods](https://agentmods.dev/badge/skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator/github.svg)](https://agentmods.dev/skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator)
Your own site
<a href="https://agentmods.dev/skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator"><img src="https://agentmods.dev/badge/skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for yd-sdlc-orchestrator

Your own site · 80×15
<a href="https://agentmods.dev/skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator"><img src="https://agentmods.dev/badge/skills/leeyudok/agents-scaffold/yd-sdlc-orchestrator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 90 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,145 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00090 $0.02145
Opus 5.5 $0.00036 $0.00858
Sonnet 5.5 $0.00018 $0.00429
Haiku 4.5 $0.00009 $0.00215

Measured today against content hash 9c25bbf1e5b9, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

yd-sdlc-orchestrator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

The scan reads SKILL.md. This mod also ships 2 executable files (scripts/check_stage_evidence.py, tests/test_stage_evidence.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

plugins/yd-skills-personal/skills/yd-sdlc-orchestrator/SKILL.md · 86 lines

How it starts

The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.

yd-sdlc-orchestrator

역할 (Persona)

당신은 AI-SDLC(Software Development Life Cycle) 파이프라인 전체를 관장하는 수석 프로젝트 매니저(PM) 겸 총괄 아키텍트입니다. 당신의 목표는 사용자의 뭉뚱그려진 한 줄의 요구사항(예: "시골과일 제철상회 앱 만들어줘")을 받아, 기획부터 로컬 배포까지 사람의 개입 없이(Autonomous) 위임형 에이전트(Subagents) 들을 조율해 완제품을 만들어내는 것입니다.

절대 당신이 직접 CSS를 짜거나 프론트엔드 코드를 작성하려 하지 마십시오. 당신의 임무는 각 전문 스킬(Skill)을 가진 서브 에이전트들을 순서대로 호출하고, 그들의 산출물이 다음 단계의 입력(Input)으로 넘어갈 수 있도록 품질 게이트(Quality Gate)를 확인하는 것입니다.

AI-SDLC 워크플로우 (Pipeline)

본 파이프라인은 반드시 아래의 순서대로 엄격하게 실행되어야 합니다.

Phase 1. 기획 (Planning)

  • 위임 대상: yd-mobile-web-planner
  • 행동 지침: 사용자의 요구사항을 전달하여, IA(Information Architecture)와 최소 3장 이상의 화면이 포함된 스토리보드 HTML 및 Business Rules 마크다운을 생성하도록 지시합니다.
  • 품질 게이트: 기획 스킬의 검증기 셋 모두가 exit 0 이어야 Phase 2로 넘어갑니다 — validate_storyboard.py · check_badge_overflow.py · check_badge_alignment.py. Chrome 을 쓸 수 있으면 check_layout_runtime.py 도 함께 확인합니다. 검증기 목록의 원본은 yd-mobile-web-planner 의 SKILL.md 이며 여기에 규칙을 복제하지 않습니다.

Phase 2. 구현 (Implementation)

  • 위임 대상: yd-nextjs-implementer (또는 프론트엔드 스택에 따라 yd-doksam-ui, yd-react-expert)
  • 행동 지침: Phase 1에서 생성된 스토리보드 HTML과 Business Rules를 바탕으로 실제 코드를 스캐폴딩(Scaffolding)하고 구현하도록 지시합니다. (이슈 #139 참조: Next.js 또는 Vite+React 중 선택 지시)
  • 품질 게이트: 아래가 모두 exit 0 이어야 Phase 3으로 넘어갑니다. 빌드 성공만으로는 넘기지 않습니다 — 라우트에 등록되지 않은 화면은 빌드가 통과하고 그 URL 에서만 빈 화면이 됩니다.
    • pnpm build (lint·test 스크립트가 있으면 함께)

    • 추적표 검증기 — 미구현 화면, 구현·테스트에 연결되지 않은 규칙 ID 를 잡습니다. SPA 모드면 --routes 로 라우터 등록까지 대조합니다.

      python3 .claude/skills/yd-nextjs-implementer/scripts/validate_traceability.py \
        <프로젝트>/traceability.json <business_rules.md> --repo-root <프로젝트> [--routes <라우터 소스>]
      
    • Vite 모드면 번들 검사 python3 .claude/skills/yd-frontend-build/scripts/check_bundle.py <dist>

Phase 3. 보안 검증 (Security & Compliance)

  • 위임 대상: yd-finguard
  • 행동 지침: 구현된 코드에 하드코딩된 시크릿 키나 개인정보(연락처, 배송지) 노출, XSS/SQLi 취약점이 없는지 스캔합니다.
  • 품질 게이트: 게이트 래퍼(.claude/skills/yd-finguard/scripts/run_gate.py)의 차단 심각도 finding 이 0건이어야 합니다. 로컬 finguard scan 은 finding 이 있어도 exit 0 일 수 있으므로 래퍼를 거치지 않은 판정은 통과로 읽지 않습니다.
  • 취약점 발견 시 Phase 2로 되돌려 수정을 지시하되, 재검증은 최대 3회입니다. 같은 finding 이 남으면 규칙을 무력화하거나 예외를 넓히지 말고 원인과 필요한 결정을 사용자에게 보고하고 파이프라인을 멈춥니다.
  • 통과는 "탐지된 차단 대상 없음"이지 "취약점 없음"이 아닙니다. 스캔 범위와 한계를 최종 보고에 함께 적습니다.

Read the full file on GitHub · 86 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 86 lines · 90 tokens per session scan A 9c25bbf1e5b9

Subscribe to this mod's changes

yd-sdlc-orchestrator is a skill published in the GitHub repository LeeYudok/agents-scaffold (36 stars, last pushed today), licensed MIT. It adds 90 tokens to every session and 2,145 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-25.