A guided workflow for fixing a reported bug or making a requested code change. It checks the project's development phase, gathers the needed details, identifies affected parts, and implements the change with tests.

Use it when changing one or more components because of a bug report, requested modification, or other user-described issue.

It prevents fixes from being made without enough project context or at the wrong stage of development. It also helps account for related design decisions and missing requirements.

How pangon/ai-sdlc-framework configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to pangon/ai-sdlc-framework. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/pangon/ai-sdlc-framework/main/.claude/skills/SDLC-fix/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/pangon/ai-sdlc-framework

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/pangon/ai-sdlc-framework/sdlc-fix/github.svg)](https://agentmods.dev/skills/pangon/ai-sdlc-framework/sdlc-fix)

Your own site

<a href="https://agentmods.dev/skills/pangon/ai-sdlc-framework/sdlc-fix"><img src="https://agentmods.dev/badge/skills/pangon/ai-sdlc-framework/sdlc-fix/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/pangon/ai-sdlc-framework/sdlc-fix"><img src="https://agentmods.dev/badge/skills/pangon/ai-sdlc-framework/sdlc-fix.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 61 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 4,723 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Privilege Escalation · line 219
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00061	$0.04723
Opus 5.5	$0.00024	$0.01889
Sonnet 5.5	$0.00012	$0.00945
Haiku 4.5	$0.00006	$0.00472

Measured 2mo ago against content hash b971e86fca8d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

SDLC-fix scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

- **External tool and library dependencies**: when a fix requires tools or libraries that are not available in the current environment (system packages like ffmpeg, database engines, runtime tools, etc.), **always notify

.claude/skills/SDLC-fix/SKILL.md · 236 lines

How it starts

The opening of the file, as written. The whole thing — 236 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Instructions

You are applying a user-reported fix, bug correction, or modification to the codebase. The work is not driven by tasks.md — the user describes what needs to be done and you derive the scope, context, and implementation plan from that description combined with the project's authoritative sources.

Phase Validation

Before doing anything else, read the **Phase**: field of the ### Current State subsection in CLAUDE.md. Then follow the matching case below:

Not initialized — Stop, recommend /SDLC-init, and do not proceed.
Specification — Stop, recommend /SDLC-elicit to continue refining specification or /SDLC-design to start the design phase, and do not proceed.
Design — Stop, recommend completing design with /SDLC-design, then /SDLC-decompose and /SDLC-implementation-plan to create the task list, and do not proceed.
Code — this is the expected state. Proceed with Issue Elicitation.

Issue Elicitation

Gather enough context from the user to understand the problem and determine the scope of the fix. Ask the user the following, adapting the questions to what they have already provided:

Problem description — What is the issue, bug, or desired change? Ask for:
- Observed behavior vs. expected behavior (for bugs)
- What they want to achieve (for changes/enhancements)
- Steps to reproduce (for bugs, if applicable)
- Error messages or logs (if available)
Affected area — Which part(s) of the system are involved? Help the user identify:
- Which component(s) are affected (e.g., frontend, backend) — refer to the components listed in 3-code/CLAUDE.code.md
- Which scripts or runbooks are involved (if the fix targets deploy/operations artifacts in 4-deploy/)
- Which specific files, modules, or features they believe are involved (if they know)
Scope boundaries — Clarify what is in scope and what is not:
- Is this a minimal targeted fix, or should related issues in the same area also be addressed?
- Are there any constraints on the approach (e.g., "don't change the API contract", "must be backwards compatible")?

Read the full file on GitHub · 236 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 236 lines · 61 tokens per session scan B b971e86fca8d

Subscribe to this mod's changes

SDLC-fix is a skill published in the GitHub repository pangon/ai-sdlc-framework (130 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 61 tokens to every session and 4,723 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Debugging

SDLC-fix next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
SDLC-fixpangon/ai-sdlc-framework	Skill	130	2mo ago	Apache-2.0	B	61	Claude Code
systematic-debuggingopen-metadata/OpenMetadata	Skill	16k	yesterday	Apache-2.0	A	37	Claude Code
log-error-digestzebbern/claude-code-guide	Skill	4.7k	3d ago	MIT	A	71	Claude Code, Codex
cwv-optimizeradobe/skills	Skill	319	yesterday	Apache-2.0	A	112	Claude Code
ci-fixersipyourdrink-ltd/bernstein	Skill	1.2k	yesterday	Apache-2.0	A	15	Claude Code, Codex
incident-response-incident-responsermyndharis/antigravity-skills	Skill	1.9k	23d ago	MIT	A	36	Claude Code
triaging-web-analytics-supportPostHog/posthog	Skill	41k	yesterday	none	A	151	Claude Code, Codex

ai-sdlc-framework: Skill for Claude Code