Home / Plugins / don-cheli-sdd-framework
don-cheli-sdd-framework
doncheli/don-cheli-sddPlugin
Full SDD (Spec-Driven Development) framework that turns requirements into tested, documented, production-ready code through 7 disciplined lifecycle phases. Includes 72+ slash commands (/dc:*), 14 reusable skills, 15 reasoning models, 4 estimation models, OWASP security audits, and adversarial code review. TDD enforced as an iron law. Multilingual: Spanish, English, Portuguese.
Why this score
Popularity score: 62/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 22, 2026 at commit 90d936237fdb, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.scripts/.claude/don-cheli/scripts/actualizar.sh:147, scripts/actualizar.sh:147
- Runs shell commands Common for dev tools. Read the commands it runs.CHANGELOG.md:1, README.es.md:6, README.md:6 and 36 more
- Installs system packagesscripts/.claude/don-cheli/scripts/instalar.sh:57, scripts/instalar.sh:57 and 2 more
- Includes scripts in hidden folders Folders starting with a dot are easy to miss when you read a repo.scripts/.claude/don-cheli/scripts/actualizar.sh:100, scripts/.claude/don-cheli/scripts/bucle.sh:46, scripts/.claude/don-cheli/scripts/instalar.sh:55 and 1 more
Web addresses in its code:
- raw.githubusercontent.comCLAUDE.en.md:38
- api.github.comcomandos/dc/actualizar.md:65
- repo.charm.shscripts/.claude/don-cheli/scripts/instalar.sh:55
- docker.comruntime/src/sandbox/docker.ts:59
- opencode.aiscripts/.claude/don-cheli/scripts/generar-config.sh:310
- doncheli.tvbin/don-cheli.js:45
- get.docker.comruntime/src/sandbox/docker.ts:52
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onedon-cheli-sdd-framework doncheli/don-cheli-sdd · Plugin | 62 | ★ 59 | not measured | 3mo ago |
| cc-sdd-new-agent gotalab/cc-sdd · Skill Both about sdd | 86 | ★ 3.7k | ≈69 always | 22d ago |
| deepchat-sdd ThinkInAIXYZ/deepchat · Skill Both about sdd | 78 | ★ 6.4k | ≈129 always | 16d ago |
| aldc-spec-tdd-development-framework-for-al javiarmesto/ALDC-AL-Development-Collection · Plugin Both about framework and tdd | 66 | ★ 115 | not measured | 2d ago |
| framework Eigenwise/atomic-agents · Skill Both about framework | 78 | ★ 6.3k | ≈88 always | 16d ago |