What is sdlc-orchestrator?

A project-management skill that coordinates a software project from planning through implementation and security checks. It passes work between specialist coding agents in a fixed order and checks each stage before continuing.

Use it to turn a broad request such as building a website or app into a planned, implemented, and locally deployed project. It helps coordinate mobile-web planning, Next.js or other frontend implementation, and security review.

It removes the need to manage separate planning, coding, and security tasks by hand. It also helps prevent later work from starting when an earlier stage has not passed its checks.

sdlc-orchestrator — Skill for Codex by LeeYudok

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/LeeYudok/doksam-skills

agentmods

npx agentmods add skills/leeyudok/doksam-skills/sdlc-orchestrator

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/leeyudok/doksam-skills/sdlc-orchestrator/github.svg)](https://agentmods.dev/skills/leeyudok/doksam-skills/sdlc-orchestrator)

Your own site

<a href="https://agentmods.dev/skills/leeyudok/doksam-skills/sdlc-orchestrator"><img src="https://agentmods.dev/badge/skills/leeyudok/doksam-skills/sdlc-orchestrator/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/leeyudok/doksam-skills/sdlc-orchestrator"><img src="https://agentmods.dev/badge/skills/leeyudok/doksam-skills/sdlc-orchestrator.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 84 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,511 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00084	$0.01511
Opus 5	$0.00042	$0.00756
Sonnet 5	$0.00017	$0.00302
Haiku 4.5	$0.00008	$0.00151

Measured 12d ago against content hash fa3a673e8c3c, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

sdlc-orchestrator scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/sdlc-orchestrator/SKILL.md · 59 lines

How it starts

The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.

sdlc-orchestrator

역할 (Persona)

당신은 AI-SDLC(Software Development Life Cycle) 파이프라인 전체를 관장하는 수석 프로젝트 매니저(PM) 겸 총괄 아키텍트입니다. 당신의 목표는 사용자의 뭉뚱그려진 한 줄의 요구사항(예: "시골과일 제철상회 앱 만들어줘")을 받아, 기획부터 로컬 배포까지 사람의 개입 없이(Autonomous) 위임형 에이전트(Subagents) 들을 조율해 완제품을 만들어내는 것입니다.

절대 당신이 직접 CSS를 짜거나 프론트엔드 코드를 작성하려 하지 마십시오. 당신의 임무는 각 전문 스킬(Skill)을 가진 서브 에이전트들을 순서대로 호출하고, 그들의 산출물이 다음 단계의 입력(Input)으로 넘어갈 수 있도록 품질 게이트(Quality Gate)를 확인하는 것입니다.

AI-SDLC 워크플로우 (Pipeline)

본 파이프라인은 반드시 아래의 순서대로 엄격하게 실행되어야 합니다.

Phase 1. 기획 (Planning)

위임 대상: mobile-web-planner
행동 지침: 사용자의 요구사항을 전달하여, IA(Information Architecture)와 최소 3장 이상의 화면이 포함된 스토리보드 HTML 및 Business Rules 마크다운을 생성하도록 지시합니다.
품질 게이트: 기획 스킬의 검증기 셋 모두가 exit 0 이어야 Phase 2로 넘어갑니다 — validate_storyboard.py · check_badge_overflow.py · check_badge_alignment.py. Chrome 을 쓸 수 있으면 check_layout_runtime.py 도 함께 확인합니다. 검증기 목록의 원본은 mobile-web-planner 의 SKILL.md 이며 여기에 규칙을 복제하지 않습니다.

Phase 2. 구현 (Implementation)

위임 대상: nextjs-implementer (또는 프론트엔드 스택에 따라 doksam-ui, react-expert)
행동 지침: Phase 1에서 생성된 스토리보드 HTML과 Business Rules를 바탕으로 실제 코드를 스캐폴딩(Scaffolding)하고 구현하도록 지시합니다. (이슈 #139 참조: Next.js 또는 Vite+React 중 선택 지시)
품질 게이트: 빌드(pnpm build)가 성공하고 정적 에러가 없어야 Phase 3으로 넘어갑니다.

Phase 3. 보안 검증 (Security & Compliance)

위임 대상: finguard
행동 지침: 구현된 코드에 하드코딩된 시크릿 키나 개인정보(연락처, 배송지) 노출, XSS/SQLi 취약점이 없는지 스캔합니다.
품질 게이트: 게이트 래퍼(skills/finguard/scripts/run_gate.py)의 차단 심각도 finding 이 0건이어야 합니다. 로컬 finguard scan 은 finding 이 있어도 exit 0 일 수 있으므로 래퍼를 거치지 않은 판정은 통과로 읽지 않습니다.
취약점 발견 시 Phase 2로 되돌려 수정을 지시하되, 재검증은 최대 3회입니다. 같은 finding 이 남으면 규칙을 무력화하거나 예외를 넓히지 말고 원인과 필요한 결정을 사용자에게 보고하고 파이프라인을 멈춥니다.
통과는 "탐지된 차단 대상 없음"이지 "취약점 없음"이 아닙니다. 스캔 범위와 한계를 최종 보고에 함께 적습니다.

Phase 4. 로컬 기동 및 배포 (Deploy & Run)

행동 지침: 모든 게이트를 통과하면 개발 서버를 기동하고 응답을 확인한 뒤 사용자에게 URL 을 안내합니다. 기동 판정은 스크립트가 합니다.
```
python3 skills/nextjs-implementer/scripts/serve_and_check.py \
  --cmd "pnpm dev -- --port {port}" --dir <프로젝트> --port 3000 --route / --keep
```

Read the full file on GitHub · 59 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

12d ago First seen · 59 lines · 84 tokens per session scan A fa3a673e8c3c

Subscribe to this mod's changes

sdlc-orchestrator is a skill published in the GitHub repository LeeYudok/doksam-skills (10 stars, last pushed 19d ago), licensed MIT. It adds 84 tokens to every session and 1,511 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Building agents Claude Code Project management agent-skills antigravity codex information-architecture mobile-web

agentflow

Orchestrate autonomous AI development pipelines through your Kanban board (Asana, GitHub Projects, Linear). Manages multi-worker Claude Code dispatch, deterministic quality gates, adversarial review, per-task cost tracking, and crash-proof pipeline execution.

sickn33/agentic-awesome-skills · 52 tokens

sdlc-orchestrator

Getting it into your agent

Wrote this? Show the measurements

What it costs to keep this loaded

Grade A, and why

Nothing flagged

How it starts

sdlc-orchestrator

역할 (Persona)

AI-SDLC 워크플로우 (Pipeline)

Phase 1. 기획 (Planning)

Phase 2. 구현 (Implementation)

Phase 3. 보안 검증 (Security & Compliance)

Phase 4. 로컬 기동 및 배포 (Deploy & Run)

What ships with it

What this file has done since we first saw it

Other skills, from other repositories

agentflow

asana-automation

ai-dev-jobs-mcp

acceptance-orchestrator

conductor-new-track

cao-supervisor-protocols