Install
Before you start:
In your project folder:
curl -fsSL https://raw.githubusercontent.com/EricTechPro/super-board/main/get.sh | bash
Or as a Claude Code plugin:
/plugin marketplace add EricTechPro/super-board
/plugin install super-board@super-board
[!NOTE]
The plugin ships the skills only. Run /super-board:super-board onboard and its 🔍 Checks step adds the guard hooks, scripts and workflows. Needs Claude Code, gh, jq, bash 3.2+ and Python 3.9+; the installer checks.
Security
Two security skills come with every install, and they stay separate:
| Skill | Runs | Covers |
|---|
pr-security-review | On every PR, inside the QA lane. Each finding fails QA and goes back to Build. | The PR's diff against its base: high-confidence, exploitable bugs only. From Anthropic's claude-code-security-review. |
security-audit | Only when you ask (/security-audit). The board never runs it. | The whole repository, in depth. From Cloudflare's security-audit-skill, fetched at install with npx skills. |
--no-helper-skills skips the security-audit download; /super-board onboard adds it later.
Claude Code's built-in /security-review is left as it is.
Running from Codex or OpenCode? See supported hosts for tested versions, sign-in and gaps.
Optional post-run learning can delegate an already installed calibrate skill after
verified selected work completes. It applies only to explicitly permitted existing
canonical skill files; the package bundles no private skill. See
post-run calibration.
Quick start
1. Install
curl -fsSL https://raw.githubusercontent.com/EricTechPro/super-board/main/get.sh | bash
2. Onboard
/super-board onboard
Checks · GitHub · Board · Branch · AGENTS.md · Policies · Bug sources · Review. Enter takes the recommended answer.
3. Run
/super-board run my-app
Add cards to Ready. The board drains on its own.
How it works
Which path? Clear idea, foggy idea or bugs: the routing rule says what to run, and when 1–5 tickets go to /implement-spec instead of the board.
Skills
9 skills (5 you type, 4 the board runs). Uses Matt Pocock skills, ponytail, impeccable, humanizer, Anthropic's security review and Cloudflare's security-audit.
You type — 5 skills
| Skill | What it does |
|---|
/super-board | Orchestrator: plans waves, runs Build → QA → Review, merges when green. |
/super-collect | Finds problems, verifies them, writes a findings doc for /to-spec and /to-tickets. |
/ui-refine-loop | Critique → refine loop that polishes one page or component. |
/visual | One HTML page: branch recap, plan, or codebase map with diagrams. |
/git-sync | Commit per logical change, merge-pull, push without force, report. |
The board runs — 4 skills
| Skill | What it does |
|---|
/super-build | Builder lane: worktree, smallest safe change, tests, draft PR. |
/super-qa | Tester lane: evidence, test-gap check, screenshots, or bounce to Build. |
/super-review | Reviewer lane: own hypotheses, remembers prior findings, merge gate. |
/pr-security-review | Security pass on every PR diff; super-qa runs it, findings fail QA. |
Each name links to that skill's README. Adding a skill? Write its SKILL.md and README.md, add a line to skills/families.json, and this table updates itself.
Commands
/super-board onboard # 8-step setup, resumes
/super-board lint # vague ACs?
/super-board status # read-only snapshot
/super-board run <slug> # drain the board
/super-board stop # stop workers
/super-collect [source] # find problems → findings doc → /to-spec
/ui-refine-loop <route> # polish one page
/visual [recap|plan|path] # one HTML page
/git-sync # commit, pull, push
Flags: run --low|--high · run --codex[=<model>] · super-collect --since 30d
Guards & hooks
Run automatically once installed. Python stdlib, JSON in, JSON out.
This is the beginning of the README. Read the rest at the original. Read the full README ↗
