design-sprint — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited design-sprint (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Turn a chosen software approach into a complete, reviewable design spec ready for implementation planning.
Prerequisite: The user has already decided WHAT to build (either through brainstorm-session or by coming in with a clear idea). This skill handles HOW to design it.
<HARD-GATE> Do NOT write any code, scaffold any project, or invoke any implementation tool until the design is approved by the user. This is a DESIGN skill, not an implementation skill. </HARD-GATE>
--non-interactive mode, skip approvals and mark unconfirmed sections in awaiting_user_review.This skill honors two mode flags when passed in the invocation:
--non-interactive — Skip user-approval gates. Produce a best-effort design doc, write it to the default in-project path (no commit), and emit a trailing JSON block listing awaiting_user_review items. For agent/CI callers that deadlock on interactive menus.--resume <run-id> — Load checkpoint state from .brainstorm/state/<run-id>.json and continue from the last saved step.Save state to .brainstorm/state/<run-id>.json at these transitions:
Checkpoint schema is the same as brainstorm-session (see that skill for the full JSON shape) with skill: "design-sprint" and phase values 1 | 2 | 5 | 6-<section> | 7 | 8-iter-N.
On --resume <run-id>, load the file, announce the step you're resuming from, and continue without re-running completed steps.
Complete these steps in order:
docs/design.md if present — that file is the project's brand / UI/UX design direction; honor it as a constraint, never write to it)<path>. Please review and let me know about any changes."/rad-planner:plan for implementation planning (see "After the Design" below)One self-contained markdown file — ask the user where, with two sensible options:
docs/ (suggestdocs/YYYY-MM-DD-<topic>-spec.md), with a header marking it transient: "Design spec — consumed by `/rad-planner:plan`; archive after planning." The repo's doc-hygiene tooling (rad-repo-manager) will later flag it for archiving — that's the designed lifecycle. Never write to docs/design.md: that file is the project's brand / UI/UX design direction, not a technical spec.
~/Documents/Brainstorms/YYYY-MM-DD-<topic>-spec.md; on Claude Desktop / Cowork, also surface the file so it can be saved or downloaded directly.
Use clear, concise language. Never auto-commit — the user commits via their normal flow.
Dispatch the spec-reviewer agent with the substituted references/subagent-prompts/spec-review.md template, passing the current iteration and max_iterations (default 5) and any prior iteration's blocking_issues. Parse the JSON response:
status: approved → proceed to user review gatestatus: issues_found and iteration < max_iterations → fix the blocking issues, increment iteration, re-dispatchescalation_required: true (or iteration >= max_iterations with issues remaining) → stop looping. Surface the unresolved_issues JSON to the user with: "Spec review hit iteration cap with unresolved issues. Please decide: (a) accept these as known gaps, (b) rewrite the affected sections yourself, or (c) drop back to Step 5 to redesign." In --non-interactive mode, keep the current spec on disk and add the unresolved issues to awaiting_user_review.Markdown fallback is accepted from the agent — parse best-effort if JSON is missing.
"Spec written to <path>. Please review it and let me know if you want to make any changes before we start the implementation plan."Wait for user response. If changes requested, make them and re-run spec review.
Hand off to /rad-planner:plan to turn the approved spec into a release-map implementation plan with risk review — its discovery interview pre-fills from the spec, so the user won't be re-asked what the spec already answers. If rad-planner is not installed, surface this to the user and suggest installing it, or let the user invoke their preferred implementation-planning workflow.
Do NOT invoke frontend-design, mcp-builder, or any other implementation skill directly from design-sprint — implementation planning is a separate, reviewable phase.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.