
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
donnyclaude
Advanced tools
Opinionated, all-in-one Claude Code power-user setup. Zero to production-grade AI-assisted development in one command.
Your Claude Code just got superpowers.
DonnyClaude is an opinionated, all-in-one power-user setup for Claude Code. One command installs 107 skills, 49 specialized agents, coding rules for 13 languages, a full project workflow engine, and 7 pre-configured MCP servers. Then Claude itself walks you through setting up your project.
"I went from a fresh Claude Code install to autonomous multi-phase project execution in under 2 minutes."
# Install directly from GitHub
npx donnyclaude
That's it. DonnyClaude checks your prerequisites, installs the full toolkit to ~/.claude/, then launches Claude Code as an interactive setup wizard to configure your project.
# Clone and run locally
git clone https://github.com/d0nmega/donnyclaude.git
cd donnyclaude
node bin/donnyclaude.js
# Or install globally
npm install -g donnyclaude
donnyclaude
| Component | Count | What It Does | |
|---|---|---|---|
| Skills | GSD workflow, Superpowers, ECC quality, language patterns | 107 | Slash commands for every dev workflow |
| Agents | Executor, verifier, planner, reviewer, debugger... | 49 | Specialized AI agents for each task type |
| Rules | TypeScript, Python, Rust, Go, C++, Kotlin, Java, Swift, PHP, Perl, C#, COBOL | 70 files | Coding standards enforced automatically |
| GSD Engine | Get Shit Done workflow | 1 | Plan -> Execute -> Verify -> Ship |
| Hooks | Format, guard, context monitor | 8 | Automatic quality gates on every edit |
| Commands | Slash commands | 60 | /gsd:plan-phase, /code-review, /tdd... |
| MCP Servers | Context7, Playwright, 21st.dev, Exa, Semantic Scholar, Computer Use, Vercel | 7 | Live docs, browser automation, UI generation |
brew install node # if needed
npx donnyclaude
# Install Node.js from https://nodejs.org/ (LTS recommended)
# Then open PowerShell or Command Prompt:
npx donnyclaude
curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
sudo apt-get install -y nodejs
npx donnyclaude
# Ubuntu/Debian
curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
sudo apt-get install -y nodejs
# Fedora
sudo dnf install nodejs
# Arch
sudo pacman -S nodejs npm
# Then:
npx donnyclaude
DonnyClaude checks for Node.js, npm, and Claude Code CLI. Installs Claude Code automatically if missing.
Checking prerequisites...
✓ Node.js v24.1.0
✓ npm 11.0.0
✓ Claude Code 2.1.97
Copies all 107 skills, 49 agents, rules, hooks, GSD engine, and commands to ~/.claude/. If you already have Claude Code customizations, they're preserved -- DonnyClaude merges, never clobbers.
Installing DonnyClaude toolkit...
✓ 107 skills installed
✓ 49 agents installed
✓ Rules installed (common + language-specific)
✓ GSD workflow engine installed
✓ Hooks installed
✓ Commands installed
✓ Settings merged (existing config preserved)
Claude Code launches and walks you through project configuration:
.planning/ directory with PROJECT.md, ROADMAP.md, STATE.md.mcp.json with 7 servers, prompts for API keys (skip any you don't have)DonnyClaude is built around Get Shit Done (GSD) -- an autonomous project execution engine:
/gsd:new-project Start a new project with deep context gathering
/gsd:plan-phase N Plan a phase before any code is written
/gsd:execute-phase N Execute with parallel subagents
/gsd:verify-work Verify every phase before moving on
/gsd:progress See where you are
/gsd:autonomous Run ALL phases back-to-back, hands-free
The loop: Brainstorm -> Plan -> Test -> Build -> Review -> Verify -> Ship
Every phase gets planned before execution. Tests are written before code. Code is reviewed before merge. Nothing ships without verification.
| Stack | Template | Extra Tools |
|---|---|---|
| Python (FastAPI, Django, Flask) | python-fastapi.md | python-review, python-testing, pytest patterns |
| TypeScript (Next.js, Node, React) | nextjs-typescript.md | 21st.dev Magic, Playwright, shadcn/ui |
| Rust | rust.md | rust-review, rust-build, cargo-llvm-cov |
| Go | go.md | go-review, go-build, table-driven tests |
| Other | generic.md | All base tools, universal rules |
Every project gets its own .mcp.json with 7 servers pre-configured:
| Server | API Key? | What It Does |
|---|---|---|
| Context7 | No | Live library documentation -- never use stale APIs again |
| Playwright | No | Browser automation, visual QA, E2E testing |
| 21st.dev Magic | Yes | Generate, refine, and browse UI components |
| Exa | Yes | Web search with code-aware results |
| Semantic Scholar | No | Academic paper search and citation graphs |
| Computer Use | No | Control your desktop -- screenshots, clicks, typing |
| Vercel | OAuth | Deploy, manage env vars, check status |
npx donnyclaude # Install + setup wizard
npx donnyclaude doctor # Health check
npx donnyclaude update # Update to latest
npx donnyclaude version # Show version
npx donnyclaude help # Show help
In your project:
your-project/
CLAUDE.md # AI instructions tailored to your stack
.mcp.json # 7 MCP servers, ready to go
.planning/
PROJECT.md # Vision and constraints
REQUIREMENTS.md # Tracked requirements
ROADMAP.md # Phase-based execution plan
STATE.md # Current progress tracker
config.json # Workflow config (models, toggles)
Globally (~/.claude/):
~/.claude/
skills/ 107 skills (GSD, Superpowers, ECC, language-specific)
agents/ 49 specialized agents
rules/ Coding standards for 13 languages
get-shit-done/ GSD workflow engine
hooks/ Auto-formatting and guard rails
commands/ 60 slash commands
settings.json Permissions and hook config
Add skills: Drop a SKILL.md into ~/.claude/skills/your-skill/
Add rules: Copy and customize: cp -r ~/.claude/rules/typescript ~/.claude/rules/your-lang
Tune GSD: Edit .planning/config.json to change models, parallelization, and workflow toggles
Power users: Set "defaultMode": "bypassPermissions" in ~/.claude/settings.json for fully autonomous operation (DonnyClaude defaults to acceptEdits for safety)
Already have a ~/.claude/ directory? DonnyClaude is safe to run:
settings.json.bak before any merge.donnyclaude doctor to verify everything is healthy after install.To remove DonnyClaude's tools from your system:
# Remove global tools
rm -rf ~/.claude/skills ~/.claude/agents ~/.claude/rules
rm -rf ~/.claude/get-shit-done ~/.claude/hooks ~/.claude/commands
# Restore settings backup (if you had pre-existing settings)
cp ~/.claude/settings.json.bak ~/.claude/settings.json
# Remove project-local files (per project)
rm CLAUDE.md .mcp.json
rm -rf .planning/
Built by Donovan Santine (D0NMEGA) -- BME Honors at UT Austin, building MoltGrid.
Powered by:
MIT -- use it, fork it, ship it.
FAQs
Opinionated, all-in-one Claude Code power-user setup. Zero to production-grade AI-assisted development in one command.
The npm package donnyclaude receives a total of 6 weekly downloads. As such, donnyclaude popularity was classified as not popular.
We found that donnyclaude demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.