speq — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited speq (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center">
<img src="assets/speq-skill-logo.svg" alt="speq-skill Logo" width="200">
A light-weight and straightforward workflow for spec-driven development with Claude Code or Codex
Getting Started • Why • How It Works • Documentation • Installation </div>
curl -fsSL https://raw.githubusercontent.com/marconae/speq-skill/main/install.sh | bashThen open Claude Code or Codex and start with the matching trigger: /speq:mission in Claude Code, or $speq:mission in Codex.
<details> <summary>What does the installer do?</summary>
speq binary for your platform (Linux x86_64/ARM64, macOS Apple Silicon). On other platforms it stops and points to the source build~/.local/bin/speq~/.speq-skill//speq:* skills for Claude Code and $-triggered skill suggestions for Codex when availableTo uninstall, see Installation — Uninstall.
</details>
I want to leverage AI coding agents such as Claude Code and Codex as effective tools for software engineering.
There are many other spec-driven development tools out there...
...but I wanted the following:
plan → implement → record)So I built speq-skill.
It combines skills with a simple CLI called speq that lists and reads the permanent spec library. The coding agent lists the features, then reads only the relevant ones during planning and during the implementation. This avoids reading unnecessary specs into the context window.
New to spec-driven development? Read "Spec-driven development: an introduction" and "Writing specs for AI coding agents" on my blog.
Each skill is grounded in semantic anchors — named references to established methodologies (like London School TDD, BLUF, ADR) that steer AI behavior toward well-documented practices.
Vibe Coding does not scale. speq-skill adds the missing workflow and guardrails.
It introduces a lightweight workflow for spec-driven development. It adds a CLI to enable the coding agent to list and read the permanent spec library.
/speq:mission → specs/mission.md + specs/architecture.md (once per project)
│
┌────────────────┼────────────────┐
▼ ▼ ▼
/speq:plan → /speq:implement → /speq:record (repeat)specs/mission.md and specs/architecture.md.Specs live in specs/<domain>/<feature>/spec.md. specs/architecture.md holds the current architecture. Plans stage in specs/_plans/<plan-name>/. The separation keeps your spec library clean while work is in progress.
/speq:plan-pr and /speq:implement-pr are two building blocks for agentic workflows centered on pull requests. Each one orchestrates the planning, implementing, and recording skills: /speq:plan-pr runs planning and opens a draft PR on a feat/<plan-name> branch, and /speq:implement-pr runs implementing and recording on that branch. You stay in the loop by commenting on the pull request. See PR Pipeline.
| Guide | Description |
|---|---|
| Installation | Setup CLI and plugin |
| Workflow | One-time mission setup, then Plan → Implement → Record cycle |
| FAQ | Add features, fix bugs, start greenfield or brownfield |
| PR Workflow | Plan and implement via a feat/ branch + Pull Request |
| Decision Log | Design decisions, ADR fragment format, validation, and show |
| CLI Reference | All CLI commands |
| MCP Servers | Optional Serena and Context7 setup |
| Semantic Anchors | Named methodologies grounding each skill |
| Model Routing | How workflow skills and sub-agents are routed across models |
| Hooks | Repo-local .speq/<name>-hook.md customizations |
speq-skill is a plugin for Claude Code, Codex, and other compatible AI coding agents. This project provides workflow structure and spec management only—the coding agent generates all code, specs, other artifacts, and tool calls.
speq-skill works well with Serena for code navigation and Context7 for library documentation. Both are optional. The skills use each one when it is installed and skip it when it is not. See MCP Servers.
[!NOTE] Serena and Context7 are separate open-source projects with their own licenses and terms available in the linked repositories. Context7 sends your documentation queries to a hosted service and offers a free-tier.
code-reviewer agent's YAGNI / Over-Engineering review category was inspired by the tag taxonomy of ponytail.This project is licensed under the MIT License.
<div align="center">
Build with Rust 🦀 and made with ❤️ by marconae.
</div>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.