No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by huisezhiyin · Codex Skill · ★ 323
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is sdd-riper safe to install? View the security audit →
SDD-RIPER Light: AI Agent Harness English | 简体中文 Let the model become the actor that moves the event forward, while the human owns direction, boundaries, evidence, and acceptance. Stop digging every canal in advance. Let the water spread, find its riverbed, then farm beside the river it discovers. In 30 Seconds SDD-RIPER is not traditional heavyweight spec-driven development. Traditional SDD often treats the spec as an operating system for the model: write a complete blueprint first, then ask the model to follow it. SDD-RIPER keeps the useful part, but changes the center of gravity: the spec is a minimal source of truth for humans first. It records goals, boundaries, decisions, validation, and recovery context. The default entry point of this repository is . It is not a weaker version. It is a daily AI Agent Harness for strong coding models: Let the model decompose, explore, fail, recover, and push the work forward. Let the human control direction, scope, pace, risk, and acceptance. Use a minimal spec, checkpoints, approval, validation, and reverse sync to make a non-deterministic model observable, recoverable, and handoff-ready. In one sentence: AI is the event actor.
| Stars | 323 |
| Forks | 61 |
| Language | Python |
| Category | Codex Skill |
| Quality Score | 61.7226436726638/100 |
| Open Issues | 2 |
| Last Updated | 2026-08-28 |
| Created | 2026-02-25 |
| Platforms | claude-code, python |
| Est. Tokens | ~16k |
Looking for a sdd-riper alternative? If you're comparing sdd-riper with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Engineering decisions engine that know when they're stale. Frame, compare, decide — with evidence decay and pa
Overture is an open-source, locally running web interface delivered as an MCP (Model Context Protocol) server
Just another desktop client for OpenCode 2. Manage projects, sessions, parallel agents, requests, and changes
Engineering decisions engine that know when they're stale. Frame, compare, decide — with evidence decay and p
AI coding dream team of agents for VS Code. Claude Code + openai Codex collaborate in brainstorm mode, debate
Jetpack Compose Agent Skill — AI-powered coding guidance with actual androidx/androidx source code receipts. W
Explore other popular codex skill tools:
sdd-riper is Lightweight AI Agent Harness for agentic coding: let strong models explore while humans steer with minimal specs, checkpoints, approval, validation, and reverse sync.. It is categorized as a Codex Skill with 323 GitHub stars.
sdd-riper is primarily written in Python. It covers topics such as agentic-coding, ai-agent, ai-agent-harness.
You can find installation instructions and usage details in the sdd-riper GitHub repository at github.com/huisezhiyin/sdd-riper. The project has 323 stars and 61 forks, indicating an active community.
The top alternatives to sdd-riper on Agent Skills Hub include haft, Overture, palot. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: