speq-implement — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited speq-implement (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Orchestrate implementation of plans in specs/_plans/<plan-name>.
Orchestration (reading tasks.md, dispatching sub-agents, verifying results) is tool-call heavy but not reasoning-heavy. The sub-agents do the heavy lifting — each pins its own model and effort in its frontmatter:
| Sub-agent | When used |
|---|---|
implementer-agent | Standard tasks (default) |
implementer-expert-agent | Tasks tagged [expert] in tasks.md |
code-reviewer | Final review of all changed files |
Get plan name from user prompt or ask if none specified.
Invoke before starting:
/speq-code-tools — Semantic code navigation and editing/speq-ext-research — Library documentation and research/speq-code-guardrails — TDD cycle and quality standards/speq-cli — spec discoverySubagents (implementer-agent, implementer-expert-agent, code-reviewer) must also invoke their required skills.
The main agent acts as orchestrator:
tasks.md for persistenceStrategy: Rotate sub-agents to maintain fresh context.
| Setting | Default | Description |
|---|---|---|
max_tasks_per_agent | 5 | Tasks before considering rotation |
checkpoint_interval | 2-3 | Tasks between progress reports |
Rotation workflow:
Read: specs/_plans/<plan-name>/plan.mdExtract: feature specs, implementation tasks, parallelization groups, verification commands.
Decompose the plan into a Work Breakdown Structure in specs/_plans/<plan-name>/tasks.md.
Format:
# Tasks: <plan-name>
## Phase 2: Implementation (Group A)
- [ ] 2.1 <task from plan>
- [ ] 2.2 <task from plan> [expert]
## Phase 2: Implementation (Group B)
- [ ] 2.3 <task from plan>
## Phase 3: Verification
- [ ] 3.1 Run test suite
- [ ] 3.2 Run linterStatus markers:
[ ] pending[~] started[x] completedDifficulty tags:
[expert] — tagged by planner-agent during planning. Routes the task to implementer-expert-agent. Preserve the tag through every status transition.implementer-agent. Most tasks are untagged.If the plan did not tag any tasks but you encounter a task that clearly warrants expert reasoning (e.g. concurrency, cross-file refactor, novel algorithm), you MAY add [expert] when materializing tasks.md. Do this sparingly — over-tagging wastes tokens.
Also create runtime tasks:
For each task in tasks.md:
TaskCreate(subject, description, activeForm)For each parallel group in plan's ## Parallelization:
expert_tasks (tagged [expert]) and standard_tasks (untagged)[ ] → [~]implementer-agentimplementer-expert-agent[~] → [x] (preserve [expert] tag)TaskUpdate(taskId, status: "completed")Standard subagent invocation:
Task(
subagent_type="implementer-agent",
description="Implement <group-name> standard tasks",
prompt="""
## Your Tasks (standard)
{standard_task_list}
## Context
- Plan: specs/_plans/{plan_name}/plan.md
- Tasks file: specs/_plans/{plan_name}/tasks.md
- Update tasks.md after each task completion (preserve task numbering)
- Report checkpoint after every 2-3 tasks
"""
)Expert subagent invocation:
Task(
subagent_type="implementer-expert-agent",
description="Implement <group-name> expert tasks",
prompt="""
## Your Tasks (expert — reasoning-heavy)
{expert_task_list}
## Context
- Plan: specs/_plans/{plan_name}/plan.md
- Tasks file: specs/_plans/{plan_name}/tasks.md
- Preserve the [expert] tag when updating status markers
- Checkpoint after every 1-2 tasks (expert tasks are heavier)
- Report key reasoning / invariants applied
"""
)After implementation completes, review all changed files.
git diff --name-only <base>...HEAD Task(
subagent_type="code-reviewer",
description="Review implementation quality",
prompt="""
## Changed Files
{changed_files_list}
## Context
- Plan: specs/_plans/{plan_name}/plan.md
- Review for: guardrail violations, dead code, obsolete tests, bad comments, optimizations
- Structure findings using the **Pyramid Principle**: group by theme, lead each group with the key finding, support with evidence.
"""
)tasks.md (tag [expert] when the finding involves subtle correctness, concurrency, or cross-file reasoning)implementer-agent for untagged, implementer-expert-agent for [expert]#### 5a. Automated Checks
Execute commands from plan's ## Verification > Checklist:
#### 5b. Scenario Coverage Audit
Cross-reference plan's ## Verification > Scenario Coverage against test results:
#### 5c. Manual Verification
Execute each step from plan's ## Verification > Manual Testing:
Update tasks.md verification tasks as completed.
Generate using references/verification-template.md. Structure the report BLUF (Bottom Line Up Front): lead with pass/fail verdict and summary before evidence details.
Save to: specs/_plans/<plan-name>/verification-report.md
✓ All tasks in tasks.md marked [x]
✓ Code review passed (or findings fixed)
✓ Verification passed
✓ Report generated
Ready for: /speq-record <plan-name>If context is lost or compacted:
specs/_plans/<plan-name>/tasks.md[ ] or [~])| File | Use When |
|---|---|
references/tdd-cycle-checklist.md | Sub-agent TDD reference |
references/task-flow.md | Task lifecycle management |
references/verification-template.md | Phase 6 report generation |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.