spec-kit-clarify — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-kit-clarify (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Resolve high-impact ambiguity in the active feature specification before planning.
spec-kit-clarify.spec.md already exists but has high-impact uncertainty.[NEEDS CLARIFICATION], TODOs, or conflicting statements).spec-kit-specify first).spec-kit-plan) or task generation (spec-kit-tasks).spec-kit-analyze).spec-kit-reconcile).spec-kit after spec-kit-specify and before spec-kit-plan when ambiguity is still blocking.spec.md immediately.digraph clarify_workflow {
rankdir=TB;
node [fontname="Helvetica", fontsize=10];
edge [fontname="Helvetica", fontsize=9];
start [label="Invoke spec-kit-clarify", shape=doublecircle];
resolve_paths [label="Resolve FEATURE_SPEC path", shape=box];
has_spec [label="spec.md exists?", shape=diamond];
stop_specify [label="STOP: run spec-kit-specify first", shape=octagon, style=filled, fillcolor=red, fontcolor=white];
scan_taxonomy [label="Scan with clarification taxonomy", shape=box];
has_high_impact [label="High-impact ambiguity remains?", shape=diamond];
report_none [label="Report no critical ambiguity", shape=box];
build_queue [label="Build and rank up to 5 questions", shape=box];
ask_loop [label="Ask one question at a time\n(recommend/suggest, disambiguate if needed)", shape=box];
integrate [label="Integrate accepted answer into spec.md", shape=box];
validate [label="Validate update and consistency", shape=box];
continue_gate [label="Continue loop?", shape=diamond];
final_report [label="Report touched sections, coverage, next step", shape=box];
done [label="Clarify complete", shape=doublecircle];
start -> resolve_paths;
resolve_paths -> has_spec;
has_spec -> stop_specify [label="no"];
has_spec -> scan_taxonomy [label="yes"];
scan_taxonomy -> has_high_impact;
has_high_impact -> report_none [label="no"];
report_none -> done;
has_high_impact -> build_queue [label="yes"];
build_queue -> ask_loop;
ask_loop -> integrate;
integrate -> validate;
validate -> continue_gate;
continue_gate -> ask_loop [label="yes"];
continue_gate -> final_report [label="no"];
final_report -> done;
}scripts/check-prerequisites.sh --paths-only --json.FEATURE_SPEC from the JSON payload.FEATURE_SPEC is missing, stop and direct the user to spec-kit-specify.spec.md:assets/clarification-taxonomy.md as the required category checklist.Clear, Partial, or Missing.Partial or Missing categories where clarification changes implementation or validation outcomes.Impact * Uncertainty.<=5 words.<=5 words.yes, recommended, or suggested as confirmation of the current recommendation.## Clarifications exists.### Session YYYY-MM-DD.- Q: <question> → A: <final answer>.FEATURE_SPEC after each accepted answer.<=5.## Clarifications, ### Session YYYY-MM-DD.FEATURE_SPEC path.ResolvedDeferredClearOutstandingspec-kit-plan or run clarify again later.No critical ambiguities detected worth formal clarification. and suggest proceeding.stop, done, proceed.Deferred with rationale.spec.md with embedded clarification historyNever ask about cosmetic or stylistic details. Every question must materially affect architecture, data model, testing, UX, operations, or compliance.
Ask one question at a time. Batching questions overwhelms the user and produces shallow answers.
Each accepted answer must be applied to the relevant spec sections immediately. Never defer updates to a later pass.
Check existing spec content and prior clarification sessions before asking. Do not re-ask what is already resolved.
assets/clarification-taxonomy.mdreferences/spec-kit-workflow.dot for overall context of how the clarification fits into the Spec Kit process.scripts/check-prerequisites.shhttps://github.com/github/spec-kit/blob/9111699cd27879e3e6301651a03e502ecb6dd65d/templates/commands/clarify.md~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.