spec-flow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-flow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Structured workflow for complex feature development. Creates living documentation that guides implementation and serves as team reference.
This skill uses a phase-by-phase confirmation workflow, ensuring users can review and adjust at each stage.
All generated documents (.md files) MUST be written in Chinese (中文), including:
After completing each phase, you MUST use this format to request confirmation:
📋 **[Phase Name] Complete**
Created `.spec-flow/active/<feature>/<file>.md` containing:
- [Key content summary]
**Please review**:
1. [Review question]?
2. [Review question]?
✅ Say "continue" to proceed to next phase
✏️ Tell me what to modify if neededUser: I want to implement user authentication
AI: [Creates only proposal.md] + confirmation prompt
User: continue
AI: [Creates only requirements.md] + confirmation prompt
User: looks good, next
AI: [Creates only design.md] + confirmation prompt
User: continue
AI: [Creates only tasks.md] + confirmation promptIf user explicitly requests to skip phase-by-phase confirmation:
Then you may generate all documents consecutively, but still request final overall confirmation.
scripts/init-spec-flow.sh <feature-name> or manually create .spec-flow/active/<feature-name>/templates/ directory.spec-flow/archive/ when doneGoal: Define WHY this change is needed
Create .spec-flow/active/<feature>/proposal.md using templates/proposal.md.template:
Exit Criteria: Proposal reviewed, open questions resolved, scope agreed.
⏸️ Phase Checkpoint: After creating proposal.md, ask user:
→ Wait for user confirmation before proceeding to Requirements phase
Goal: Define WHAT the system should do
Create .spec-flow/active/<feature>/requirements.md using templates/requirements.md.template:
Use EARS Format (see references/ears-format.md):
Include:
Exit Criteria: All requirements testable, acceptance criteria clear.
⏸️ Phase Checkpoint: After creating requirements.md, ask user:
→ Wait for user confirmation before proceeding to Design phase
Goal: Define HOW to implement
Create .spec-flow/active/<feature>/design.md using templates/design.md.template:
Exit Criteria: Design addresses all requirements, trade-offs documented.
⏸️ Phase Checkpoint: After creating design.md, ask user:
→ Wait for user confirmation before proceeding to Tasks phase
Goal: Break down into EXECUTABLE steps
Create .spec-flow/active/<feature>/tasks.md using templates/tasks.md.template:
Task Guidelines (see references/task-decomposition.md):
Progress Tracking:
Exit Criteria: All tasks completed, tests passing, documentation updated.
⏸️ Phase Checkpoint: After creating tasks.md, ask user:
→ Wait for user confirmation before starting implementation
Goal: Execute tasks according to tasks.md
Implementation supports three execution modes. Default is Step Mode unless user specifies otherwise.
| Mode | Trigger Phrases | Behavior |
|---|---|---|
| Step Mode (Default) | "start implementation", "开始执行" | Execute ONE task, wait for confirmation, repeat |
| Batch Mode | "execute all", "一口气执行", "全部执行", "batch mode" | Execute ALL tasks consecutively, report at end |
| Phase Mode | "execute phase 1", "执行第一阶段", "execute setup" | Execute all tasks in ONE phase, then wait |
Execute tasks one at a time with user confirmation between each.
When to use: Complex tasks, need careful review, first time using spec-flow
Flow:
User: start implementation
AI: 🔄 **Task T-001**: [description]
[Executes task]
✅ Completed (1/10)
👉 Say "continue" for next task
User: continue
AI: 🔄 **Task T-002**: [description]
...Execute all remaining tasks consecutively without waiting.
When to use: Simple tasks, trusted plan, want speed
Trigger phrases:
Flow:
User: execute all tasks
AI: ⚡ **Batch Mode Activated**
🔄 T-001: [description] → ✅
🔄 T-002: [description] → ✅
🔄 T-003: [description] → ✅
...
📊 **Batch Complete**: 10/10 tasks done
**Summary**:
- Files created: [list]
- Files modified: [list]
⚠️ Stopped early? Check error above.Batch Mode Rules:
Execute all tasks within a specific phase, then wait for confirmation.
When to use: Want to review after each phase (Setup → Core → Testing → Docs)
Trigger phrases:
Flow:
User: execute setup phase
AI: 📦 **Phase Mode: Setup**
🔄 T-001: [description] → ✅
🔄 T-002: [description] → ✅
✅ **Setup Phase Complete** (2/10 total)
**Next phase**: Core Implementation (T-010 to T-015)
👉 Say "continue" or "execute next phase"You MUST do these steps before executing:
- [x])| Action | Step Mode | Batch Mode | Phase Mode |
|---|---|---|---|
| Read tasks.md before starting | ✅ | ✅ | ✅ |
| Check dependencies | ✅ | ✅ | ✅ |
Update - [ ] to - [x] after each task | ✅ | ✅ | ✅ |
| Show progress | After each | After each | After each |
| Wait for confirmation | After each task | After all done | After phase done |
| Stop on error | ✅ | ✅ | ✅ |
| Prohibited Action | Why It's Wrong |
|---|---|
| Skip a task | Breaks dependency chain |
| Execute tasks out of order | Dependencies may not be met |
| Do work not in tasks.md | Scope creep, untracked changes |
| Forget to update tasks.md | Progress tracking inaccurate |
| Continue after error without user approval | May cause cascading failures |
Stop and ask user for guidance when:
project-root/
└── .spec-flow/
├── steering/ # Global project context (optional)
│ ├── constitution.md # Project governance principles
│ ├── product.md # Product vision and goals
│ ├── tech.md # Technology constraints
│ └── structure.md # Code organization patterns
├── active/ # Work in progress
│ └── <feature-name>/
│ ├── proposal.md
│ ├── requirements.md
│ ├── design.md
│ ├── tasks.md
│ └── .meta.json # Status, timestamps, owner
└── archive/ # Completed features (for reference)
└── <feature-name>/
└── ...For larger projects, create .spec-flow/steering/ documents to provide consistent context across all specs:
| Document | Purpose | Template |
|---|---|---|
constitution.md | Project governance, decision-making principles | templates/steering/constitution.md.template |
product.md | Product vision, target users, key metrics | templates/steering/product.md.template |
tech.md | Tech stack, constraints, dependencies | templates/steering/tech.md.template |
structure.md | Code organization, naming conventions | templates/steering/structure.md.template |
| From | To | Condition |
|---|---|---|
| Proposal | Requirements | Proposal approved, questions resolved |
| Requirements | Design | Requirements complete, testable |
| Requirements | Tasks | Simple feature, design implicit |
| Design | Tasks | Design approved |
| Tasks | Done | All tasks complete, archived |
.spec-flow/archive/ when donescripts/validate-spec-flow.py before implementationreferences/workflow.mdreferences/ears-format.mdreferences/task-decomposition.mdreferences/examples/This skill works with any AI agent that supports the Skills format:
~/.claude/skills/)~/.blade/skills/)The .spec-flow/ directory is Git-friendly and can be committed with your project for team collaboration.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.