spec-plan — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-plan (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the task is still fuzzy and the agent should define success before implementation begins.
This skill turns a request into a practical spec. The goal is not project-management theater. The goal is to make coding safer and faster by clarifying scope, constraints, edge cases, validation, and what counts as done.
references/self-check.md defines the self-check checklist, ambiguity handling, blocking-question rules, execution guardrails, and change-control policy.references/output-template.md defines the preferred implementation-ready spec output shape for persisted task specs and complex conversation plans.Read references/self-check.md before finalizing a persisted task spec, handing a plan to implementation, or when ambiguity could lead to execution-time guessing.
Use references/output-template.md when writing a persisted task spec or a complex plan that needs stable structure.
Before doing anything else, look for a SPEC.md in the target repository root.
If it exists, treat it as the repository-specific preference layer for:
If it is missing, use the built-in defaults for this skill series instead of blocking on the missing file.
If it is partial, use the fields it defines and fall back to defaults for the rest.
When no repository root SPEC.md is available, use these defaults:
docs/knowledge-base/docs/specs/<slug>.mdspec-index for relevant decisions, constraints, setup notes, pitfalls, and validation rules before planning non-trivial workreferences/self-check.md before implementation handoffChoose one output mode before finalizing the plan:
Default persisted path: docs/specs/<slug>.md, unless the repository root SPEC.md defines a different location.
When persisting a task spec, create or update the file and then continue into implementation only if the user asked for execution or the task clearly implies execution. If the user only asked for planning, stop after producing the spec.
When using conversation plan mode, state that the plan is not being persisted and then proceed directly if the user asked for implementation.
Before handing either mode to implementation, apply references/self-check.md. If the self-check finds unresolved blocking questions, stop before implementation and ask for the needed decision.
Before producing a plan for existing, non-trivial, risky, or multi-turn work, retrieve relevant memory through spec-index.
Look for:
Build retrieval queries from the user's request, likely components, file paths, tools, frameworks, domain terms, and error words.
Use the retrieved memory only when it is relevant. Summarize the useful matches in the resulting spec under Context From Memory.
If no relevant memory is found, say so briefly and continue. Do not block planning on an empty knowledge base.
Skip retrieval for small, self-contained tasks where no durable project context is likely to matter.
spec-crlp.spec-index.SPEC.md when present and apply the built-in defaults for anything it does not define.spec-index when the task is existing-project, non-trivial, risky, or likely to span turns.SPEC.md when present, otherwise from the built-in defaults.references/self-check.md before finalizing the plan or handing it to implementation.Prefer this shape unless the user asks for a different format:
# Spec
## Goal
## Problem Statement
## Context From Memory
## In Scope
## Out Of Scope
## Constraints
## Assumptions
## Blocking Questions
## Acceptance Criteria
## Edge Cases
## Validation Plan
## Execution Plan
## Open Questions
## Self-CheckWrite acceptance criteria as behaviors that can be observed or validated.
Good acceptance criteria usually answer questions like:
Avoid vague statements like "works well" or "is user friendly" unless you translate them into something observable.
Use Gherkin for behavior-oriented acceptance criteria when it improves precision:
Scenario: User completes the happy path
Given the required setup exists
When the user performs the target action
Then the expected observable result should happenKeep non-behavioral acceptance criteria as plain Markdown bullets. Do not force Gherkin onto setup notes, implementation steps, or architectural decisions.
SPEC.md when present, otherwise apply the built-in defaults instead of redefining conventions per task.spec-crlp once implementation feedback starts coming in.spec-index when they should be reusable later.SPEC.md when one exists, not inside one task-specific spec.SPEC.md.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.