sdlc-sync SKILL.md skillB
sdlc-sync from tscarpe/claude-sdlc-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add tscarpe/claude-sdlc-skills/sdlc-sync@git:20261105.2f7edc1Pins git:20261105.2f7edc1 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- tscarpe/claude-sdlc-skills
- Path
skills/sdlc-sync/SKILL.md- Versions recorded
- 18
- Latest version
- git:20261105.2f7edc1, committed Nov 5, 2026
- First version recorded
- Sep 18, 2026
- Size
- 20,199 bytes
- Repository stars
- 66
- License
- MIT
Syncs SDLC artifacts between local markdown workspace and the authoritative web platform: pulls platform digest/audit/answers plus the published standard doc back into local intake files (pull-artifacts), aligns the local dev workspace with finalized platform artifacts - standard doc, design, cases, gate verdict projection (pull-dev-bundle) - and pushes local artifacts as fallback channels (push-artifacts / pull-answers / publish / push-cases). The platform is the single source of truth; local…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 产物同步桥（sdlc-sync）
**平台是需求与产物的唯一权威**：原文块表、质检产物、澄清答复、变更单都在平台；
本地 markdown 退化为 **skill 过程工作区 / 离线兜底**。本 skill 是两者之间唯一的桥：只做搬运与
回写，不做任何体检/生成决策。
> **平台定位（需求平台权威化）**：原文以块表关系化入库（锚点 = 块 ID）、
> 建卡自动导入、质检纯分析读块模型；已发布需求的变更走**变更单**（draft → confirm → changed →
> 增量质检合并 → 重新发布），不再开新卡；评论系统上平台（可升级澄清项）。兜底子命令的新守卫面：
> `push-artifacts` 在 changed 卡收到 409（原文消化走平台增量通道，本地重算需先等回 published）；
> `publish` 在 changed 卡受**影响面已消化 + 草稿一致性**双重守卫（changed 卡重算在平台完成，
> 本地合成的文档与平台草稿哈希不一致会被拒）；`pull-answers` 遇 changed 卡建议语：「该卡处于
> 变更中，重开项以平台为准，本地 digest 请等待增量合并后再拉取（pull-artifacts）」。
> `pull-artifacts`（新增）：把平台权威的 digest/audit markdown、答复与已发布 standard 拉回本地
> intake——本地 sdlc-design / sdlc-test / sdlc-gate 兜底链的输入源与平台权威对齐。
## 前置
- 平台地址：环境变量 `SDLC_PLATFORM_URL`，缺省 `http://127.0.0.1:8080`
- 请求方式：一律用 `curl`，payload 写入临时文件后 `-d @file.json`（避免 shell 转义问题）
- 需求对应关系与拉取凭据记录在 `sdlc/<需求名>/.platform`（JSON：`{"reqId":"REQ-2026-001","pulled":{…}}`——pulled 为 pull-artifacts / pull-dev-bundle 共用的各产物版本凭据，结构见 [references/dev-bundle-merge.md](references/dev-bundle-merge.md)），首次 push 后写入
- 平台本体与验收脚本在你的平台仓库（环境变量 `SDLC_PLATFORM_REPO` 指向其 checkout；连接拒绝时先确认服务已启动：`$SDLC_PLATFORM_REPO/scripts/dev.sh`）
- 飞书快照/媒体读取：`lark-cli`（权限不足时降级为本地已有原文，不阻断）
…Read the whole file at its exact version.
How to install
mdr add tscarpe/claude-sdlc-skills/sdlc-sync@sha256:c965d5bad45bb134The line at the top of this page pins the label git:20261105.2f7edc1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ubpmx2wtne2eng34)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 18 versions of this file, between Sep 18, 2026 and Nov 5, 2026, about one every 3 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261105.2f7edc1 latest | 2026-11-05 | 2f7edc1 | 20,199 B | B | view · diff |
| git:20261105.93b60b6 | 2026-11-05 | 93b60b6 | 18,759 B | B | view · diff |
| git:20261026.e25e8b4 | 2026-10-26 | e25e8b4 | 17,826 B | B | view · diff |
| git:20261018.62c92c0 | 2026-10-18 | 62c92c0 | 13,265 B | B | view · diff |
| git:20261018.5f3673c | 2026-10-18 | 5f3673c | 12,702 B | B | view · diff |
| git:20261018.5886880 | 2026-10-18 | 5886880 | 13,658 B | B | view · diff |
| git:20261016.c6f0070 | 2026-10-16 | c6f0070 | 13,296 B | B | view · diff |
| git:20261014.83f27af | 2026-10-14 | 83f27af | 13,119 B | B | view · diff |
| git:20261014.6f40fa1 | 2026-10-14 | 6f40fa1 | 13,105 B | B | view · diff |
| git:20261013.2342825 | 2026-10-13 | 2342825 | 12,844 B | B | view · diff |
| git:20260930.29f1d9d | 2026-09-30 | 29f1d9d | 9,705 B | B | view · diff |
| git:20260928.9ef9188 | 2026-09-28 | 9ef9188 | 9,705 B | B | view · diff |
| git:20260927.a0e0ac4 | 2026-09-27 | a0e0ac4 | 9,559 B | B | view · diff |
| git:20260926.fa9dd0b | 2026-09-26 | fa9dd0b | 9,319 B | B | view · diff |
| git:20260919.25ece4c | 2026-09-19 | 25ece4c | 8,188 B | B | view · diff |
| git:20260918.13b03f4 | 2026-09-18 | 13b03f4 | 7,672 B | B | view · diff |
| git:20260918.92f6241 | 2026-09-18 | 92f6241 | 7,670 B | B | view · diff |
| git:20260918.cd3c536 | 2026-09-18 | cd3c536 | 5,695 B | B | view |
Audit of the latest version
- fail: No link to a raw IP address (matched: http://127.0.0.1:8080)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (20199 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
tscarpe/claude-sdlc-skills · 66 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ubpmx2wtne2eng34 GET https://markdownregistry.com/api/v1/resolve?ref=tscarpe/claude-sdlc-skills/sdlc-sync GET https://markdownregistry.com/api/v1/blob/c965d5bad45bb134ac02f6759128b3e1d5e44fef1ea4e7c4345beadfa2516f18
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.