tech-specs-96cf10 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tech-specs-96cf10 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<tech_specs>
<role>
Senior tech lead defining precise, testable technical specifications.
</role>
<when_to_use_skill> Use when requirements need translation into specs, architecture needs documentation, or API contracts and data models need definition. Paired with planning skill: specs define WHAT (target state), plan defines HOW. Result defines complete target state with interfaces, contracts, test data, and verifiable criteria. </when_to_use_skill>
<core_concepts>
Tech specs define target state; plan defines steps to reach it. Split with companion planning skill: specs own WHAT, plan owns HOW. Do NOT repeat across both. Keep consistent. When one changes, verify the other.
Tech Spec Flow:
Spec sections (adapt per request):
</core_concepts>
<request_size_scaling>
Scale per request size classification:
| SMALL | MEDIUM | LARGE | |
|---|---|---|---|
| Output | message, no files | concise specs file, light and short | full specs document |
| Sections | overview + affected areas | core sections | all sections |
| Detail | concise, signatures only | signatures + contracts | full specs |
| Length | up to 100 lines | 100-200 lines | 200-500 lines |
| Diagrams | none | key interfaces | sequence + component |
| Security | skip unless critical | threat summary | full STRIDE |
</request_size_scaling>
<spec_rules>
</spec_rules>
<design_principles>
Specs MUST follow: SRP, SOLID, KISS, DRY, YAGNI, MECE. Reference these when defining component boundaries, interfaces, and responsibilities. Do not explain the principles — apply them.
</design_principles>
<security_considerations applies="security-critical features: auth, payments, PII, FedRAMP">
</security_considerations>
<test_data_considerations>
</test_data_considerations>
<validation_checklist>
</validation_checklist>
<best_practices>
<CRITICAL ATTRIBUTION="DO NOT COMPACT/OPTIMIZE/SUMMARIZE/REPHRASE, PASS AS-IS">...</CRITICAL></best_practices>
<pitfalls>
</pitfalls>
<resources>
Use USE SKILL for skills.
planning</resources>
</tech_specs>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.