spec-finish — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-finish (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Post-implementation workflow: validate → review → stack commits → prepare PR.
Before starting, verify:
If not complete → go back to spec-implement.
Run validation checks.
npm test
# or
pytest
# or
cargo testnpm run typecheck
# or
python -m mypy
# or
cargo checknpm run lint
# or
ruff check .
# or
cargo clippynpm run build
# or
go build ./...If any fail: Return to spec-implement to fix.
If all pass: Proceed.
Use the Skill tool to invoke code-review skill for comprehensive code review.
git log --onelinegit rebase -i <base-branch>Optional - use code-docs skill if needed.
## Completion Summary
**Feature:** [name]
**Tests:** [passed/failed]
**Type Check:** [passed/failed]
**Lint:** [passed/failed]
**Commits:** [N commits in stack]
**Ready for PR:** [yes/no]"Implementation complete. [N] commits stacked. Ready for [submit/open PR]."
This skill orchestrates other skills:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.