kiro-spec-batch-f1ab91 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited kiro-spec-batch-f1ab91 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<background_information>
## Specs (dependency order) parsing</background_information>
<instructions>
{{KIRO_DIR}}/steering/roadmap.md## Specs (dependency order) section to extract:[x] = done, [ ] = pending)## Existing Spec Updates## Direct Implementation CandidatesDo not include these in dependency-wave execution; they are awareness-only inputs for sequencing and consistency review.
## Specs (dependency order), verify {{KIRO_DIR}}/specs/<feature>/brief.md exists@kiro-discovery to generate briefs first."Group pending features into waves based on dependencies:
[x])Display the execution plan:
Spec Batch Plan:
Wave 1 (sequential): app-foundation
Wave 2 (sequential): block-editor, page-management
Wave 3 (sequential): sidebar-navigation, database-views
Wave 4 (sequential): cli-integration
Total: 6 specs across 4 wavesIf roadmap contains ## Existing Spec Updates or ## Direct Implementation Candidates, mention them separately as non-batch items so the user can see the whole decomposition.
For each wave, process its features one at a time in the main context.
For each feature in the wave, execute this task:
Create a complete specification for feature "{feature-name}".
Bind the feature argument in each phase to "{feature-name}" (including `$1` or `{feature}` references). This batch uses the existing fast-track mode: supply `-y` to design and tasks before entering their approval checks. Required phase review gates still apply.
1. Read the brief at {{KIRO_DIR}}/specs/{feature-name}/brief.md for feature context
2. Read the roadmap at {{KIRO_DIR}}/steering/roadmap.md for project context
3. Execute the full spec pipeline. For each phase, read the corresponding skill's SKILL.md for complete instructions (templates, rules, review gates):
a. Initialize: If spec.json already exists, reuse that spec without reinitializing or renaming it. Otherwise read .windsurf/skills/kiro-spec-init/SKILL.md; use the brief as the project description and initialize spec.json and requirements.md in the existing brief directory. Later phases may update their own artifacts.
b. Generate requirements: Read .windsurf/skills/kiro-spec-requirements/SKILL.md and execute for feature "{feature-name}"
c. Generate design: Read .windsurf/skills/kiro-spec-design/SKILL.md and execute with arguments "{feature-name} -y", including required design review
d. Generate tasks: Read .windsurf/skills/kiro-spec-tasks/SKILL.md and execute with arguments "{feature-name} -y", including required task review
4. Let each successful phase record its approvals through its documented fast-track flow. If a phase review fails or needs human input, stop this feature and report the blocker; do not force its approvals to true
5. Report completion with file list and task countThis compatibility installation targets Cascade, which does not expose programmatic subagent dispatch. Execute features in the wave sequentially in the main context. Devin Local / CLI has a separate subagent-capable harness.
After all features in the wave complete:
After all waves complete, perform an inline cross-spec consistency review in the main context. This is the highest-value quality gate -- it catches issues that per-spec review gates cannot.
Review task:
Read ALL generated specs and check for consistency across the entire project:
{{KIRO_DIR}}/specs/*/design.md (primary: contains interfaces, data models, architecture){{KIRO_DIR}}/specs/*/requirements.md (for scope and acceptance criteria){{KIRO_DIR}}/specs/*/tasks.md (for boundary annotations only -- read _Boundary:_ lines, skip task descriptions){{KIRO_DIR}}/steering/roadmap.mdReading priority: Focus on design.md files (they contain interfaces, data models, architecture). For requirements.md, focus on section headings and acceptance criteria. For tasks.md, focus on _Boundary:_ annotations.
Check:
Existing Spec Updates or Direct Implementation Candidates, do the generated new specs avoid absorbing that work by accident?Output: CONSISTENT areas + ISSUES with (which specs, what's inconsistent, suggested fix).
After the inline review:
{{KIRO_DIR}}/specs/*/tasks.md to verify all specs exist[x]Existing Spec Updates or Direct Implementation Candidates, leave them untouched and mention them as remaining follow-up items unless already explicitly completed elsewhereDisplay final summary:
Spec Batch Complete:
✓ app-foundation: X requirements, Y design components, Z tasks
✓ block-editor: ...
✓ page-management: ...
...
Total: N specs created, M tasks generated
Cross-spec review (inline): PASSED / N issues found (M fixed)
Existing spec updates pending: <count or none>
Direct implementation candidates pending: <count or none>
Next: Review generated specs, then start implementation with @kiro-impl <feature></instructions>
[x] in roadmap.md or existing tasks.md are skipped.Feature generation failure:
@kiro-spec-quick <feature> --auto manually for failed features."Circular dependencies:
Roadmap not found:
@kiro-discovery first."All specs already complete:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.