spec-driven-development — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-driven-development (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Prevent wasted implementation work by making the shared understanding explicit before any code is written. A spec surfaces assumptions, resolves ambiguity, and gives both the developer and the agent a stable reference point throughout the work. Retrofitting clarity after implementation costs 5–10× more than establishing it upfront.
| Use spec-driven | Skip (proceed directly) |
|---|---|
| New feature or module | Single-line typo fix |
| Ambiguous or verbal requirements | Self-evident single-file change |
| Change touches more than one file | Direct user instruction with no ambiguity |
| Estimated work > 30 minutes | Reversible experiment / spike |
| Multiple engineers will be involved |
Before drafting the spec, explicitly list what you are assuming:
Assumptions I'm making:
- [ ] The user wants X, not Y
- [ ] This will use the existing auth system
- [ ] No DB schema changes are neededAsk the user to confirm or correct before continuing.
A complete spec has six sections:
## Objective
What this change achieves. State it as a testable success criterion:
"A user can reset their password via email. The flow completes in under 3 steps."
## Commands
Build, test, and run commands for this project:
- Install: `npm install`
- Dev: `npm run dev`
- Test: `npm test`
- Lint: `npm run lint`
## Scope
Files and modules this change will touch.
Files and modules this change must NOT touch.
## Design
How it will be built — data flow, key functions, API shape, schema changes.
Keep it concrete: name the functions, files, and interfaces.
## Testing strategy
- Unit tests: what and where
- Integration tests: which flows
- Manual verification steps
## Boundaries
| Always do | Ask first | Never do |
|-----------|-----------|----------|
| ... | ... | ... |Present the spec and stop. Do not start coding until the user explicitly approves it or requests changes.
If the spec reveals the requirements are unclear, surface that as an open question — do not resolve ambiguity silently.
In the PR description, link or quote the relevant spec sections. Reviewers should be able to map every diff line back to a spec requirement.
A markdown spec block covering all six sections above, ready to be saved as docs/specs/<feature-name>.md or pasted into a GitHub issue.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.