
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@ansarullahanas/cc-guide
Advanced tools
Claude Code skills and guides for autonomous AI-assisted development
Skills and guides for autonomous AI-assisted development with Claude Code and Ralph loops.
Three skills you can add to any project:
prd - Create PRDs that Claude can execute autonomouslysetup-claude - Initialize or audit repositories for optimal Claude Code usageagent-browser - Headless browser automation and E2E testingPlus guides on how I actually use Claude Code.
# Add the PRD skill
npx cc-guide add-skill prd
# Add the setup/audit skill
npx cc-guide add-skill setup-claude
# Add the browser automation skill
npx cc-guide add-skill agent-browser
# Or add all skills
npx cc-guide add-skill --all
This copies the skills to your project's .claude/skills/ folder.
In Claude Code:
/prd # Create a PRD for a new feature
/setup-claude init # Set up a new repository
/setup-claude audit # Audit an existing repository
Traditional: You code, AI helps, you iterate forever.
This way: You define the work, AI executes, you review.
Traditional: Ralph Loop:
Human → AI → Human Human → PRD → AI Loop → Human Review
↑ ↓ ↓ ↓
└──────┘ (autonomous) (complete)
The quality of your PRD determines the quality of your output.
| Tool | Install | Why |
|---|---|---|
| Claude Code | claude.ai/claude-code | Core CLI |
| GitHub CLI | brew install gh | Git operations |
| tmux | brew install tmux | Persistent sessions |
| Ralph TUI | npm install -g ralph-tui | Task orchestration |
| Agent Browser | npm install -g agent-browser | Browser automation |
/prd)Creates self-verifying PRDs through an interview process:
PRD.md and prd.jsonThe output is a PRD that Ralph TUI can execute autonomously.
/agent-browser)Headless browser automation for AI agents:
Essential for any task involving UI verification.
/setup-claude)Two modes:
Init - For new repositories (13 phases):
Audit - For existing repositories (8 phases):
cc-guide/
├── skills/
│ ├── prd/ # PRD creation skill
│ │ ├── SKILL.md # Entry point
│ │ ├── AGENTS.md # Comprehensive reference
│ │ ├── interview/ # Interview process guides
│ │ └── categories/ # Task-type specific guidance
│ │
│ ├── setup-claude/ # Setup/audit skill
│ │ ├── SKILL.md # Entry point
│ │ ├── workflows/ # Init & audit workflows
│ │ ├── components/ # Detailed component guides
│ │ ├── reference/ # Reference material
│ │ └── templates/ # Config templates
│ │
│ └── agent-browser/ # Browser automation skill
│ └── SKILL.md # CLI reference
│
├── guides/
│ ├── my-claude-workflow.md
│ ├── ralph-loops-explained.md
│ └── best-practices.md
│
├── templates/
│ └── prompt.hbs # Ralph TUI prompt template
│
└── bin/
└── add-skill.js # npx cc-guide add-skill
CLIs don't consume context window. MCPs do.
Before enabling any MCP:
gh, vercel, supabase, stripe)Ralph loops run for hours. tmux means:
Can't run two Ralph loops on the same codebase. Git worktrees fix this:
git worktree add ../project-feature-a feature-a
Each worktree can run its own tmux session with its own Ralph loop.
MIT - See LICENSE
The goal isn't to remove humans from development. It's to elevate humans from typists to architects.
FAQs
Claude Code skills and guides for autonomous AI-assisted development
We found that @ansarullahanas/cc-guide demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.