spec-crlp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-crlp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when implementation already exists and feedback shows a mismatch between expected and actual behavior.
This skill is about converging on correct behavior with evidence. Start from the spec, reproduce the problem, find the root cause, make the smallest coherent fix, and verify the result. Treat lint, tests, logs, CI, and review comments as signals that help narrow the gap between the implementation and the acceptance criteria.
Before starting the correction loop, look for a SPEC.md in the target repository root.
If it exists, treat it as the repository-specific preference layer for:
If it is missing, use the built-in defaults for this skill series instead of blocking on the missing file.
If it is partial, use the fields it defines and fall back to defaults for the rest.
When no repository root SPEC.md is available, use these defaults:
docs/knowledge-base/spec-index for similar symptoms, root causes, fix patterns, setup gotchas, and validation rules before correction workspec-index.Before starting a correction loop, retrieve relevant memory through spec-index.
Look for:
Build retrieval queries from failing test names, CI output, stack traces, log messages, file paths, tools, frameworks, components, and observed symptoms.
Use the retrieved memory as diagnostic context, not as proof. Confirm the current root cause with local evidence before changing code.
If no relevant memory is found, say so briefly and continue. Do not block correction on an empty knowledge base.
spec-plan first.spec-index.spec-plan.Gather as many of these as the task provides:
SPEC.md when present.spec-index.If the expected behavior is missing, derive the minimum workable acceptance criteria from the conversation and say that you are doing so. If that would be risky, hand off to spec-plan.
SPEC.md when present and apply the built-in defaults for anything it does not define.spec-index.SPEC.md when present, otherwise use the built-in default behavior and discoverable repo tooling.Prefer this structure unless the user asks for something lighter:
# Correction Summary
## Expected Behavior
## Observed Behavior
## Relevant Memory
## Root Cause
## Fix
## Validation
## Residual Risk
## Memory To CaptureSPEC.md when present, otherwise use the built-in default behavior instead of ad hoc command choices.spec-plan when the acceptance criteria are unclear, conflicting, or incomplete.spec-index when you confirm a reusable root cause, setup rule, fix pattern, or debugging lesson.SPEC.md when repeated correction work exposes a repository-specific validation or setup convention that should become explicit.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.