
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
agentic-sdlc
Advanced tools
Simulating a complete Software Development Lifecycle (SDLC) with specialized AI Agents.
Transform your IDE into a complete Software Development Lifecycle team with AI-powered agents, automated workflows, and intelligent knowledge management.
Agentic SDLC is an AI-powered development framework that simulates a complete software development team within your IDE. It provides:
/slash commandsAt the core of Agentic SDLC is the Brain - an intelligent knowledge management system that:
→ See GEMINI.md for complete Brain documentation
# Install globally
npm install -g agentic-sdlc
# Or with bun
bun install -g agentic-sdlc
If you prefer to run directly from source or update frequently:
# Clone repository
git clone https://github.com/truongnat/agentic-sdlc.git
cd agentic-sdlc
# Install dependencies
bun install # or npm install
If you installed from source, use the built-in updater:
# Check and install updates
python tools/infrastructure/update/updater.py
# Create project with brain system
agentic-sdlc create my-project
cd my-project
# Setup your IDE
agentic-sdlc ide cursor # or windsurf, cline, etc.
# Start building
/pm Build a todo app with authentication
# Install brain system in current directory
agentic-sdlc install
# Setup IDE integration
agentic-sdlc ide cursor
# Initialize knowledge base
agentic-sdlc init-kb
Specialized AI agents for every SDLC phase:
Planning → @PM, @BA, @PO
Design → @SA, @UIUX
Review → @QA, @SECA
Development → @DEV, @DEVOPS
Testing → @TESTER
Delivery → @REPORTER, @STAKEHOLDER
Meta → @BRAIN, @ORCHESTRATOR
Execute complete workflows with simple commands:
/brain # Brain system management (sync, stats)
/cycle # Complete task lifecycle
/explore # Deep investigation
/orchestrator # Full SDLC automation
/sprint # Sprint management
/validate # System validation
/metrics # View metrics dashboard
/release # Release management
/emergency # Critical incident response
/housekeeping # Cleanup & maintenance
/review # Code review workflow (NEW)
/debug # Systematic debugging (NEW)
/refactor # Safe refactoring (NEW)
/onboarding # Agent ramp-up (NEW)
/docs # Documentation creation (NEW)
/commit # Smart git commit (NEW)
/worktree # Parallel AI agent workflows (NEW)
/autogen # Multi-agent task execution (NEW)
agentic-sdlc/ # 🧠 Brain (Root)
├── .agent/ # AI workflows, skills, KB
├── tools/ # Neo4j, research, utilities
├── docs/ # Documentation
└── projects/ # Your projects
├── project-1/
├── project-2/
└── [add-yours]/
Benefits:
Automated Learning:
Three-Layer System:
/auto Create a SaaS platform with authentication and billing
# Complete automation from planning to deployment
# Each team member uses the same brain
agentic-sdlc ide all
git pull # Share knowledge base
/pm Start Sprint 3
agentic-sdlc install
/brain # Index and analyze codebase
/pm Migrate authentication to OAuth2
# Project Management
agentic-sdlc create <name> # Create new project
agentic-sdlc install # Add to existing project
# IDE Integration
agentic-sdlc ide cursor # Setup Cursor IDE
agentic-sdlc ide all # Setup all supported IDEs
# Knowledge Base
agentic-sdlc init-kb # Initialize KB
agentic-sdlc list # List roles & workflows
agentic-sdlc kb search "query" # Search KB
# Release Management
agentic-sdlc release preview # Preview changes
agentic-sdlc release release # Full release cycle
# Brain System
agentic-sdlc agent # Run default agent
python tools/neo4j/brain_parallel.py --sync # Sync brain
| Traditional Development | With Agentic SDLC |
|---|---|
| Manual planning | Automated with @PM |
| Ad-hoc architecture | Structured with @SA, @UIUX |
| Inconsistent code quality | Enforced by @QA, @SECA |
| Lost knowledge | Compound learning brain |
| Repetitive tasks | Automated with @AUTO |
| Single-agent limits | Multi-agent teams with AutoGen |
| Solo problem-solving | 13+ AI experts available |
MIT License - See LICENSE for details
Next Steps:
Questions? Check the documentation or open an issue.
FAQs
Simulating a complete Software Development Lifecycle (SDLC) with specialized AI Agents.
We found that agentic-sdlc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.