
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
claude-prd-workflow
Advanced tools
The complete Claude Code plugin for Product-Driven Development. Ship features faster with AI-powered PRD review, Git worktree support, and automated quality gates.
The complete Claude Code plugin for Product-Driven Development
Transform PRDs from ideas to shipped features with AI-powered review, guided implementation, and automated quality gates. Never ship unclear requirements again.
Most development teams struggle with:
PRD Workflow Manager is the first and only Claude Code plugin that manages your entire product development lifecycle:
π‘ Idea β π PRD β β
Review β π» Code β π Quality β π Ship
With AI-powered agents, automated quality gates, and Git worktree orchestration, you ship features faster while maintaining production-grade quality.
3 killer questions before you waste time on full analysis:
Impact: Catch scope bloat and unjustified features in 30s vs 10 min
/invoke "implement Stripe payments"
β Runs: architecture + security + tests + plan (parallel)
β 12 min β comprehensive outputs
Pre-flight validation catches Git issues before they break:
Impact: Clear remediation vs "git worktree add failed"
Multi-dimension analysis with automatic grading (A-F) and calibration questions that expose gaps you didn't know existed.
Before: Hours of manual review, still miss critical issues After: Minutes of AI analysis catches more with actionable questions
7 new agents for everyday coding (not just PRDs):
Before: Manual code review (30-45 min), manual test writing (hours) After: Automated review (30s), auto-generated tests (seconds)
Smart features that prevent errors and save time:
Before: Lost work on crashes, generic questions, manual conflict resolution After: 100% recovery, smart questions, AI-assisted merges
Work on 5+ features in parallel without branch switching. Enforced by default with health checks - Git 2.25+ required.
Before: Context switching costs hours every day, optional worktree = inconsistent workflow After: Mandatory isolation, instant feature switching, clear error handling
AI breaks your PRD into granular tasks with acceptance criteria, file paths, and code examples.
Before: Developers spend significant time figuring out "what's next" After: AI tells you exactly what to build, step by step
Zero-config security scans (OWASP Top 10, dependency vulnerabilities, secrets detection) and quality checks (coverage, complexity, linting).
Before: Manual security reviews miss many issues After: Automated scans find more issues in seconds
Smart dependency resolution and resource allocation across multiple features. Know exactly what's blocked, what's ready, and where to focus.
Before: 3+ PRDs running = chaos After: Crystal clear dependency graph and bottleneck analysis
Real-time progress on every PRD with automatic status updates, WORK_PLAN.md sync, and GitHub integration.
Before: "How's feature X going?" β checks 5 places
After: /list-prds β instant status on everything
Never worry about installation issues again! The plugin now self-diagnoses and auto-repairs:
/plugin-repair fixes 90%+ of issues automatically/plugin-update updates safely with auto-backupBefore: "Why aren't my commands showing up?" β hours of debugging
After: /plugin-health β instant diagnosis + /plugin-repair β fixed in seconds
Key Benefits:
Choose the right workflow for your feature size:
Use for: Features taking >1 day, multiple developers, customer-facing changes
# Step 1: Create PRD with interactive questions (Main branch)
/create-prd "Add OAuth2 authentication"
β AI asks clarifying questions
β Generates comprehensive PRD
β Stays in DRAFT by default
# Step 2: Create feature branch (enables parallel work!)
/code-prd PRD-007
β Creates feature/PRD-007-oauth2-integration
β Your Main branch stays FREE
# Step 3: Review & refine (on feature branch, separate Cursor window)
/review-prd PRD-007
β 7-dimension analysis
β Refine until Grade A/B
# Step 4: Guided development with auto-recovery β¨ NEW
/code-prd PRD-007
β AI breaks into tasks
β Step-by-step guidance
β Auto-saves progress every 3 tasks
β Resume from checkpoint if interrupted
# Step 5: Complete with AI conflict resolution β¨ NEW
/complete-prd PRD-007
β AI detects merge conflicts
β Suggests intelligent resolutions
β Auto-merge if tests pass
β Auto-cleanup branches
π― Key Benefit: Main branch never blocked. Create PRD on Main, review/dev on feature branch in parallel.
Use for: Bug fixes, small tweaks, <4 hour changes
/quick-ship "Fix dark mode toggle on iOS Safari"
β No PRD created
β Minimal tracking log
β Auto-commit (AI message) β¨ NEW
β Auto-PR with description β¨ NEW
β Auto-merge on tests pass β¨ NEW
β Complete in <1 hour
π― Key Benefit: Zero overhead for small changes. Ship fixes in minutes, not hours.
NEW in v2.4: Integrated workflow eliminates manual commit/PR creation - just describe the fix and ship!
| Criteria | Full PRD | Quick Ship |
|---|---|---|
| Duration | >1 day | <4 hours |
| Developers | Multiple | Single |
| Scope clarity | Needs definition | Crystal clear |
| Risk | Medium-High | Low |
| Examples | New feature, Refactor, Integration | Bug fix, UI tweak, Dependency update |
π‘ Key Concept: Install once globally β Available in ALL your projects automatically!
Option A: npm (Recommended - Fully Automatic)
npm install -g claude-prd-workflow
# β
Auto-installs to ~/.claude-code/
# β
Commands, agents, and skills copied to the right places
# β
Ready to use in ALL projects
# Restart Claude Code
Option B: Claude Code Marketplace (Native Plugin System)
# In Claude Code, add the marketplace:
/plugin marketplace add Yassinello/claude-prd-workflow
# Then install the plugin:
/plugin install claude-prd-workflow
# β
Direct integration with Claude Code
# β
Automatic updates via marketplace
# β
Discover all available plugins
# β
No npm required
# Restart Claude Code
Option C: Git Clone (Manual Installation)
# Clone to a temporary location
git clone https://github.com/Yassinello/claude-prd-workflow.git
cd claude-prd-workflow
# Run the installation script
node install.js
# β
Copies 18 slash commands to ~/.claude-code/commands/
# β
Copies 17 AI agents to ~/.claude-code/agents/
# β
Copies 13 skills to ~/.claude-code/skills/
# β
Copies plugin files to ~/.claude-code/plugins/claude-prd-workflow/
# β
Runs automatic health check to verify installation
π₯ Running automatic health check...
β
Plugin directory found
β
Plugin version: 2.8.0
β
Installed 18 slash commands
β
Installed 17 AI agents
β
Installed 13 skills
β
All systems operational!
# Restart Claude Code
Option D: From Claude Code (Interactive)
# In Claude Code, type:
/help plugins
# Then follow the prompts to:
# 1. Install from npm: claude-prd-workflow
# 2. Restart Claude Code
# Done!
Problem: Claude Code asks for permissions constantly, interrupting your workflow.
Solution: This plugin includes suggested ultra-permissive permissions that eliminate 99% of authorization prompts while still blocking data deletion operations.
During installation, Claude Code may offer to apply the suggested permissions. Accept to enable seamless workflow.
If automatic setup didn't work or you want to configure later:
# Copy suggested permissions to your global config
cp ~/.claude-code/plugins/claude-prd-workflow/.claude/settings.local.json ~/.claude-code/settings.json
# OR merge with existing config
cat ~/.claude-code/plugins/claude-prd-workflow/.claude/settings.local.json
# Then restart Claude Code
What's Allowed: β Git, NPM, file operations, web access, all plugin commands What's Blocked: β Only data deletion (rm, del, git clean) and secrets
π Full permissions guide β
The installation script automatically runs a health check, but you can verify anytime:
Option A: Via Command (Recommended)
/plugin-health
Option B: Via Script
cd ~/.claude-code/plugins/claude-prd-workflow
node bin/check-health.js
β Success: All systems operational β Error: Issues detected
If Issues Detected:
# Auto-repair (fixes 90%+ of issues)
/plugin-repair
# Or manually
cd ~/.claude-code/plugins/claude-prd-workflow
node bin/repair.js
# Restart Claude Code after repair
Quick Test:
/list-prds
β
Success: No PRDs found. Create your first PRD with /create-prd
β Error: Command not found β Run /plugin-repair then restart Claude Code
The plugin works immediately in any project! Just open your project in Claude Code:
# Open your existing project in Claude Code
cd ~/my-existing-project
code . # or open with Claude Code
# In Claude Code, create the PRD structure:
/create-prd
# The plugin will:
# 1. Ask for PRD details
# 2. Create product/prds/ directory if needed
# 3. Generate your first PRD file
Optional: Customize config for this specific project:
# Copy a preset (choose one based on your project type)
mkdir -p .claude
cp ~/.claude-code/plugins/claude-prd-workflow/config/presets/startup.json .claude/config.json
# Or for enterprise:
cp ~/.claude-code/plugins/claude-prd-workflow/config/presets/enterprise.json .claude/config.json
# Or for open source:
cp ~/.claude-code/plugins/claude-prd-workflow/config/presets/open-source.json .claude/config.json
That's it! π You're ready to create your first PRD.
New in v2.8: One-command updates with automatic backup and health check!
Option A: One-Command Update (Recommended - NEW in v2.8)
/plugin-update
The update command automatically:
Option B: Manual Update (Git-based installations)
cd ~/.claude-code/plugins/claude-prd-workflow
git pull origin main
node install.js
# Restart Claude Code
Option C: Reinstall (npm-based installations)
npm install -g claude-prd-workflow@latest
# Restart Claude Code
# Check your installed version
npm list -g claude-prd-workflow
# Check latest available version
npm view claude-prd-workflow version
# See what changed in new versions
npm view claude-prd-workflow versions --json
# Update to the latest version
npm install -g claude-prd-workflow@latest
# The postinstall script automatically:
# β
Updates commands in ~/.claude-code/commands/
# β
Updates agents in ~/.claude-code/agents/
# β
Updates skills in ~/.claude-code/skills/
# β
Updates plugin files in ~/.claude-code/plugins/
# Restart Claude Code to see changes
Updates are NOT automatic - this is intentional to prevent breaking changes.
When to update:
Where to check for updates:
The plugin follows Semantic Versioning:
Current stable version:
Let's walk through a real example from idea to shipped code in 30 minutes.
Scenario: You want to add a feature to prioritize MCP servers in Claude Code based on usage frequency.
In Claude Code, type:
/create-prd
Claude will ask:
MCP Server PrioritizationP1 (should-have)PRD-001Output: product/prds/01-draft/251025-mcp-server-prioritization-v1.md
The PRD template is pre-filled with sections:
Time: 2 minutes to fill in the details
/review-prd
What happens:
product/prds/02-ready/Time: 15 minutes (vs 2 hours manual review)
/code-prd
What happens:
feat/PRD-001-user-authentication../my-project-user-authentication/ (isolated workspace)product/prds/03-in-progress/You're now coding in a clean workspace!
/work-prd
What happens:
AI breaks PRD into 40+ tasks (example):
For each task:
After you complete a task β validates β moves to next
Progress tracked automatically in .claude/prd-001-progress.json
Before creating your PR:
/security-audit
β Scans for vulnerabilities, secrets, OWASP violations β Must pass (0 high-severity issues)
/quality-check
β Runs linting, tests, coverage, complexity analysis β Must pass (grade β₯ B for enterprise, C for startup)
Time: 30 seconds (vs 30 minutes manual review)
Create PR β Code review β Merge β Done! π
PRD automatically moves to product/prds/04-complete/
flowchart LR
A[π‘ Idea] -->|/create-prd| B[π Draft PRD]
B -->|/review-prd| C{π AI Review<br/>7 Dimensions}
C -->|Grade β₯ Min| D[β
Approved]
C -->|Grade < Min| B
D -->|/code-prd| E[π³ Worktree Created]
E -->|/work-prd| F[π¨βπ» Task-by-Task<br/>Implementation]
F -->|/security-audit<br/>/quality-check| G{π Quality Gates}
G -->|Pass| H[π Ship]
G -->|Fail| F
H --> I[βοΈ Complete]
style A fill:#e1f5ff
style C fill:#fff4e6
style D fill:#f6ffed
style G fill:#fff1f0
style H fill:#f6ffed
PRD Management Agents (6):
| Agent | When | What |
|---|---|---|
| π prd-reviewer | /review-prd | 7-dimension analysis, calibration questions, grading |
| π¨βπ» prd-implementer | /code-prd | Task breakdown, code examples, validation |
| πΌ orchestrator | /orchestrate | Dependency analysis, resource allocation, bottleneck detection |
| π security-expert | /security-audit | OWASP Top 10, secrets detection, vulnerability scanning |
| β quality-assurance | /quality-check | Coverage, complexity, linting, type safety |
| π devops-engineer | (on-demand) | CI/CD setup, infrastructure as code |
Daily Development Agents (7 - NEW in v2.3):
| Agent | Model | What |
|---|---|---|
| π code-reviewer | Haiku (fast) | Automated code review, best practices, complexity detection |
| π§ͺ test-automator | Haiku (fast) | Auto-generate unit/integration/E2E tests with fixtures |
| ποΈ backend-architect | Sonnet (complex) | API design, database schema, scalability guidance |
| π¨ incident-coordinator | Sonnet (complex) | Production incident response, runbooks, postmortems |
| β‘ performance-analyst | Sonnet (complex) | Bundle analysis, Core Web Vitals, systematic optimization |
| π― full-stack-orchestrator | Sonnet (complex) | End-to-end feature coordination (frontend β backend β tests) |
| π€ code-review-orchestrator | Haiku (fast) | Runs 5 agents in parallel for 30-second comprehensive review |
Choose the preset that matches your project type:
cp config/presets/startup.json .claude/config.json
Settings:
Best for: MVPs, prototypes, fast iteration
cp config/presets/enterprise.json .claude/config.json
Settings:
Best for: Production systems, regulated industries, large teams
cp config/presets/open-source.json .claude/config.json
Settings:
Best for: Open source projects, community contributions
Start with a preset, then customize:
cp config/presets/startup.json .claude/config.json
# Edit .claude/config.json to your needs
Full configuration reference β
| Command | Purpose | Example Usage |
|---|---|---|
| Core Workflow | ||
/create-prd | Create new PRD from template | Start any new feature |
/review-prd | AI-powered 7D review + grading | Before approval |
/setup-prd | Create branch + worktree (dev setup) | Ready to implement |
/code-prd | Guided task-by-task implementation | During development |
/list-prds | Show all PRDs with status | Check progress |
/archive-prd | Archive completed/cancelled PRDs | Cleanup |
| Quality & Security | ||
/security-audit | Scan dependencies, code, secrets, OWASP | Before PR |
/quality-check | Linting, tests, coverage, complexity | Before PR |
| Orchestration | ||
/orchestrate | Multi-PRD coordination & dependencies | Managing 3+ PRDs |
Work on 5+ features simultaneously without branch switching:
/setup-prd # PRD-001 β ../project-auth/
/setup-prd # PRD-002 β ../project-dashboard/
/setup-prd # PRD-003 β ../project-billing/
# Each feature has its own:
# - Isolated workspace
# - Installed dependencies
# - No merge conflicts
# - Instant context switching
Time saved: 2-3 hours/day on context switching
Managing 10+ PRDs? /orchestrate shows:
Example output:
π― Critical Path: PRD-001 β PRD-003 β PRD-005 (7 weeks)
π΄ Blocked: PRD-004, PRD-006 (waiting for PRD-003)
β
Ready: PRD-002, PRD-007 (no blockers)
β οΈ Bottleneck: Backend team at 120% capacity
Automatic issue creation when PRD approved:
{
"prd_workflow": {
"github": {
"enabled": true,
"create_issue_on_approval": true,
"issue_labels": ["feature", "P0", "PRD-001"],
"auto_assign": true,
"milestone_tracking": true
}
}
}
Result: Every approved PRD = GitHub issue with:
Security Audit (/security-audit):
Quality Check (/quality-check):
Both run in <30 seconds and block PR merge if failing.
We welcome contributions! Here's how:
git checkout -b feature/amazing-featuregit clone https://github.com/Yassinello/claude-prd-workflow.git
cd claude-prd-workflow
npm install # if you're adding JS/TS features
Use our issue templates:
/clone-prd command (duplicate PRDs)/split-prd command (split large PRDs)Core MCP Support:
Optional MCP Integrations:
New Features:
/prd-metrics)@claude-prd/analytics-mcp@claude-prd/integrations-mcpMIT License - Free for commercial and open source use.
Copyright Β© 2025 Yassine Hamou-Tahra
See LICENSE for details.
Built with:
Special thanks to the Claude Code team for creating an amazing platform!
This plugin is available through multiple distribution channels:
1. npm Registry (Recommended for automation)
npm install -g claude-prd-workflow
npm update -g2. Claude Code Marketplace (Native integration)
/plugin marketplace add Yassinello/claude-prd-workflow
/plugin install claude-prd-workflow
3. Community Marketplaces
Submit this plugin to popular Claude Code marketplaces:
This repository includes a .claude-plugin/marketplace.json file that makes it a valid Claude Code marketplace. You can:
/plugin marketplace add your-org/your-forkSee the Plugin Marketplaces documentation for more details.
If PRD Workflow Manager helps you ship faster, please:
Every star motivates us to keep improving! π
Built with β€οΈ for the Claude Code community
Documentation β’ Examples β’ Contributing β’ License
Made by @Yassinello | Powered by Claude Code π€
FAQs
The complete Claude Code plugin for Product-Driven Development. Ship features faster with AI-powered PRD review, Git worktree support, and automated quality gates.
The npm package claude-prd-workflow receives a total of 26 weekly downloads. As such, claude-prd-workflow popularity was classified as not popular.
We found that claude-prd-workflow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.