Look twice.Find the gem.

AI agents and MCP servers, each published with its source and what the checks found.

Marketplace

  • Everything
  • AI agents
  • Apps
  • MCP servers
  • Templates
  • What people want
  • What changed this week
  • The verification standard
  • The ooruby Index
  • Servers that publish no source
  • Reliability guides
  • What the catalogue holds
  • Sell here

Our library

  • Everything, in one place
  • Guides
  • Glossary
  • Calculators
  • Checklists and cheat sheets
  • Community

ooruby

  • Home
  • For teams
  • Site status
  • Company projects
  • RSS feed

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.

AI agentsAppsMCP serversTemplatesWantedCommunityOur library
Sign inSell
Catalogue/Agents/Cc Sdd

Cc Sdd

gotalab · Agent

cc-sdd turns approved specs into long-running autonomous implementation. One command installs an agentic workflow as skills for AI coding agents: discovery, requirements, design, tasks and implementation, with a separate reviewer for each task when the agent has native subagents. Discovery routes new work to extending a spec, implementing directly, creating one spec or splitting a large initiative into several. It suits teams who want agents to write the specs and humans to approve them.

Written by ooruby from the README of cc-sdd 3.1.0.

Not claimed by its maker. Is this yours? Prove it and answer the findings

Why it's useful

Agents build against written contracts and boundaries, and people approve each phase instead of steering every step.

What you could do with it

  1. 1Start a new feature with the discovery skill and let it route the work to the right next step.
  2. 2Turn a roadmap into several specs by dependency wave, with a cross-spec review for contradictions.
  3. 3Resume a workstream later from the brief and roadmap files that the discovery step writes.

Written from its documentation: what it says it can do, not what our checks found.

CSagentDeveloper tools

Maintenance

Not measured

No release date is on record for this package yet. The nightly publisher check records one as it reaches each npm package, about once every ten nights.

Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured

Not yet tested
Licence and provenance
finding
no LICENCE file at the root (.)

Published because it was found. A finding is information about where the limits are, not a verdict that the software is unsafe.

What this does not cover

  • ·Everything. Treat it as you would software from anywhere else.

Receipt history: every signed receipt for every version of this listing, and what changed between them.

In its maker's words

Turn approved specs into long-running autonomous implementation. A minimal, adaptable SDD harness with Agent Skills for Claude Code, Codex, Cursor, Copilot, Devin Local/CLI, OpenCode, Gemini CLI, and Antigravity.

Compare with

  • Acpxside by side
  • Fallowside by side
  • Vanguard Frontier Agenticside by side
Compare all 4

How far this has been checked

Static scanned

What it establishes
Its published package, or for a hosted server its source repository at a recorded commit, was read file by file, without running it, by every check in our current scan.
What it does not
How it behaves when it runs, or anything the scan does not read yet: several rubric checks, the repository's history, and compiled code in folders named dist or build. For a hosted server, that the endpoint runs the code that was read. The ooruby Index sets out exactly what was read.
Exactly what was read
Version 3.1.0, the file with digest sha512-4G9zOhWui/ajyQmqp+yJzTcuLr+TK32hNqG6uey5J5oTc4HDxPuxWvV6YLViXthesE/wGV60IfTaF6yxL45igQ==, as the registry publishes it. A published version cannot be replaced, so this names the same bytes for anyone who checks.
Authentication
Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.
How the rungs work

Adding it

Run it with:

npx -y cc-sdd@3.1.0

Pinned to 3.1.0, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.

Where this came from

Registry
npm
Package
cc-sdd
Version read
3.1.0
Resolved
2026-10-10
Open the source(opens in a new tab)

Built from source, attested

npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.

Repository
github.com/gotalab/cc-sdd
Commit
e2a0c671aef3
Built by
github.com/actions/runner/github-hosted
Registry publish attestation
signed by npm · 2026-10-10
Checked
2026-10-10

The badge, if this is your listing

It renders the current rung (static scanned) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.

[![ooruby: static scanned](https://ooruby.com/api/badge/cc-sdd)](https://ooruby.com/market/cc-sdd)

About this listing

Kind
Agent
Category
Developer tools
Pricing
Free
Sandbox
No
Hosted
No
Updated
2026-10-10
Price
Free
Get it freeVisit maker
Rating
no reviews yet
0 want this so far
Sign in to vote

Sign in to watch this listing and hear when its version, rung or findings change.

More from gotalab

See the storefront
SKMCP serverResearch
2 findingsStatic scanned
Skills are found by full-text search of their descriptions, and only metadata loads up front, with full instructions fetched on demand. Skills can carry categories and tags, and different agents can be shown different skills.

Skillport MCP

gotalab
Free

Lets your agent search a library of Agent Skills and load the full instructions of the one it needs.

No reviews yetMIT

Similar agents

All agents
OCagentDeveloper tools
3 findingsStatic scanned
Sign in with a ChatGPT account to use it under a Plus, Pro, Business, Edu or Enterprise plan, or use an API key with some extra setup. Separate options exist for code editors, a desktop app and the cloud-based Codex Web.

Openai Codex

openai
Free

Runs OpenAI's Codex coding agent locally on your computer from the command line.

71.3M installs/moApache-2.0
SKagentDeveloper tools
Clean scanStatic scanned
Skills come from GitHub repositories, given as owner and repository or as a full address, and you can try one without installing it. Updates can cover global skills, project skills or a single named skill.

Skills

rauchg
Free

Installs, finds, updates and removes agent skills across many coding agents from one command line.

38.3M installs/moMIT
ADagentDeveloper tools
Clean scanStatic scanned
It checks environment variables and reports the agent's ID, display name and session ID where one exists, with an opt-in process-tree check. A command line check answers by exit code.

Agent CLI Detector

ide
Free

Lets your JavaScript command line tool tell whether a coding agent is running it, and which one.

14M installs/moMIT

Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.