Home / Plugins / wicked-garden
wicked-garden
mikeparcewski/wicked-gardenPlugin
Wicked Garden — AI-Native SDLC A full software development lifecycle as a single Claude Code plugin. 14 domains, 80 specialist agents, 152 commands — covering everything from requirements through production operations. What makes it different from a good CLAUDE.md: it's executable infrastructure, not passive guidance. Hooks enforce workflow gates before Claude sees your prompt. Context from memory, search, and project state is assembled automatically on every turn. Decisions persist across sessions. Quality gates actually block progression when evidence is missing. Works standalone with zero external dependencies. Local SQLite storage. No API keys, no cloud services, no setup beyond install. Core systems: - Crew — Signal-driven project workflows with 8 phases (clarify → design → build → test → review → operate), 7-dimension complexity scoring, hard-enforced quality gates, and multi-perspective consensus review for high-stakes decisions - Smaht — Automatic context assembly on every prompt via 3-tier routing (hot/fast/slow). Surfaces relevant memories, code search results, kanban state, and crew context without you asking - Mem — 3-tier persistent memory (working → episodic → semantic) with auto-consolidation, tag-based search, and access-frequency ranking. Decisions from month-old sessions surface when relevant - Search — Code intelligence with symbol search, blast radius analysis, data lineage tracing, and service map discovery - Jam — AI brainstorming with dynamic persona focus groups and multi-model council sessions using installed LLM CLIs (Codex, Gemini, Copilot) Plus specialist agents for engineering, product, platform/DevSecOps, QE, data, delivery, agentic architecture, and on-demand personas.
Why this score
Popularity score: 59/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Nov 4, 2026 at commit ba0a6ca91029, first 300 source files (it's a large repo), with Cisco's open-source skill-scanner.
What its code does:
- Reads environment variables and sends network requests with them API clients do this to send your key to the service. Check which service it talks to.skills/product/imagery/scripts/provider.py and 3 more
- Runs shell commands Common for dev tools. Read the commands it runs..claude/skills/releasing/scripts/release.py:296, scripts/kanban/kanban.py:664 and 1 more
- Runs code it builds while running (eval or exec) Harder to read ahead of time, since the code is assembled while it runs.scripts/crew/worktree_manager.py
- Makes network requestshooks/scripts/bootstrap.py:665, scripts/search/external_indexer.py:286, skills/product/imagery/scripts/provider.py:93 and 13 more
- Installs system packagesscripts/platform/prereq_doctor.py:34, scripts/qe/cli_discovery.py:54 and 5 more
- Uses dependencies without a pinned version A later version of a dependency could change what runs.pyproject.toml:7 and 10 more
- Includes scripts in hidden folders Folders starting with a dot are easy to miss when you read a repo..claude/skills/releasing/scripts/batch_release.py:35, .claude/skills/releasing/scripts/changelog.py:28, .claude/skills/releasing/scripts/release.py:81
Web addresses in its code:
- aquasecurity.github.ioscripts/platform/prereq_doctor.py:270
- cli.github.comscripts/platform/prereq_doctor.py:35
- duckdb.orgscripts/platform/prereq_doctor.py:125
- ollama.comscripts/platform/prereq_doctor.py:176
- astral.shscripts/platform/prereq_doctor.py:113
- dl.k6.ioscripts/platform/prereq_doctor.py:243
- docs.docker.comscripts/platform/prereq_doctor.py:151
- hurl.devscripts/platform/prereq_doctor.py:231
- k6.ioscripts/platform/prereq_doctor.py:244
- kubernetes.ioscripts/platform/prereq_doctor.py:164
- learn.microsoft.comscripts/platform/prereq_doctor.py:72
- aka.msscripts/platform/prereq_doctor.py:71
- api.openai.comskills/product/imagery/scripts/provider.py:315
- api.replicate.comskills/product/imagery/scripts/provider.py:573
- api.stability.aiskills/product/imagery/scripts/provider.py:456
And 6 more.
These are the sites named in the code, so it's where your data could go. It isn't a complete list: code can build addresses while it runs, and a few of these may be links rather than calls. Whatever you send also goes to the AI model you use.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onewicked-garden mikeparcewski/wicked-garden · Plugin | 59 | ★ 9 | not measured | today |
| Anime Garden yjl9903/AnimeGarden · MCP server Both about garden | 66 | ★ 1.4k | not measured | today |
| garden-curator athola/claude-night-market · Subagent Both about garden | 58 | ★ 342 | ≈34 in chat | 19d ago |
| garden-plugin-author oleeskild/digitalgarden · Skill Both about garden and md | 80 | ★ 492 | ≈91 always | 16d ago |