spec-forge — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-forge (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Professional Software Specification Generator for Claude Code
Generate industry-standard specifications — from early-stage brainstorming to Technical Design with auto-generated feature specs — each usable standalone or as part of a streamlined auto chain.
Software projects need clear specifications. spec-forge covers the journey from idea to implementation-ready documents, with one thing at its centre: a requirements specification precise enough to hand to an implementation team and settle acceptance against.
| Command | Description | Standards |
|---|---|---|
/spec-forge:srs <name> | Software Requirements Specification — the delivery contract | IEEE 830, ISO/IEC/IEEE 29148 |
/spec-forge:tech-design <name> | Technical Design Document + auto-generated feature specs | Google Design Doc, RFC Template |
/spec-forge <name> | Full chain — [Idea] → [Decompose] → [PRD] → SRS → Tech Design → Review | All of the above |
/spec-forge:prd <name> | Product Requirements Document — the business case (conditional) | Google PRD, Amazon PR/FAQ |
/spec-forge:idea <name> | Interactive brainstorming — explore and refine ideas | — |
/spec-forge:decompose <name> | Decompose project into sub-features | — |
/spec-forge:review <name> | Review generated specs for quality & consistency, auto-fix issues | — |
/spec-forge:test-cases <name> | Test Cases with coverage matrix (on-demand) | Multi-dimensional coverage |
/spec-forge:audit [path] | Audit docs for quality, completeness & code alignment | — |
/spec-forge:analyze [path] | Analyze document collection — map themes, find conflicts & gaps | — |
Aliases: /prd, /srs, /tech-design, /test-cases, /idea, /decompose, /review, /audit, /analyze work as shortcuts — they invoke each skill directly, bypassing the /spec-forge orchestrator.
[Idea] → [Decompose] → [PRD] → SRS → Tech Design → Review, then hands off to code-forge/spec-forge:idea <name> — BrainstormingInteractive, multi-session brainstorming for early-stage ideas:
ideas/ directory (add to .gitignore or commit for team use)/spec-forge:idea cool-feature # Start or resume brainstorming
/spec-forge:idea # List all ideasStatus flow: exploring → researching → refining → ready → graduated (or parked at any stage)
/spec-forge <name> — Full ChainRun the streamlined specification chain in one command:
/spec-forge user-login # Auto: [Idea] → [Decompose] → [PRD] → SRS → Tech Design → Reviewdocs/features/ (Step 7 of tech-design)ideas/, uses it as requirements context/spec-forge:decompose <name> — Project DecompositionAnalyze project scope and split into sub-features if needed:
/spec-forge:decompose my-project # Interview → split analysis → manifestdocs/project-{name}.md manifest for multi-split projects/spec-forge <name> full chain (after Idea, before Tech Design)/spec-forge:srs <name> — the delivery contractThis is the document you hand to whoever builds it. It is the mandatory spine of the chain, and what acceptance is settled against.
Standalone: When no upstream PRD is found, asks additional questions to compensate.
Reference: IEEE 830, ISO/IEC/IEEE 29148, Amazon Technical Specifications
/spec-forge:prd <name> — the business caseAnswers is this worth building, for whom, at what priority. A decision document read before commitment — conditional, not every project needs one.
Run it for a new product, or when a go/no-go decision, budget approval, or stakeholder alignment is still outstanding. Skip it when the decision to build is already made — go straight to the SRS. A PRD written after the decision is ceremony.
Deliberately not in the PRD: field-level rules, state machines, error codes, Given/When/Then acceptance criteria, solution architecture. Those belong to the SRS and tech design — duplicating them creates two sources of truth that drift on the first requirement change.
Reference: Google PRD, Amazon Working Backwards (PR/FAQ), Stripe Product Spec
/spec-forge:tech-design <name>Generates a Technical Design Document including:
SRS-first: Reads docs/<name>/srs.md as the authoritative requirements source. Every component names the FR/NFR requirements it satisfies, and every requirement is satisfied by at least one component — unplaced requirements are reported rather than silently dropped. Falls back to asking compensating questions when no upstream SRS exists.
Reference: Google Design Doc, RFC Template, Uber/Meta Engineering Standards
/spec-forge:test-cases <name>Generates structured test cases with multi-dimensional coverage:
--formal adds management sections (environment, roles, schedule)/code-forge:tdd @test-cases.md/spec-forge:review <name> — Spec ReviewReview generated specifications for quality, completeness, and internal consistency:
/spec-forge:review user-login # Review all specs for user-login<!-- REVIEW: ... --> comments when domain knowledge is needed for a fix/spec-forge <name>)Best for: After generating specs, before starting implementation.
/spec-forge:audit [path] — Documentation AuditAudit existing project documentation for quality, completeness, and code alignment:
/spec-forge:audit # Audit current project's docs
/spec-forge:audit ../../other-project # Audit another projectBest for: Single projects with both documentation and source code.
/spec-forge:analyze [path] — Document Landscape AnalysisAnalyze a collection of documents to understand the knowledge landscape:
/spec-forge:analyze ../../aipartnerup-docs # Analyze a docs-only repo
/spec-forge:analyze # Analyze current project's docs/Best for: Document ecosystems, cross-repo docs, research collections, mixed-format doc repos.
/spec-forge:idea cool-feature # Brainstorm (iterative, multi-session)
↓ (graduated)
/spec-forge cool-feature # [Idea] → [Decompose] → [PRD] → SRS → Tech Design → Review
↓
/code-forge:plan @docs/features/ # Break into tasks and executeQuick path (decision already made, skip idea and PRD):
/spec-forge:srs cool-feature # The delivery contract
/spec-forge:tech-design cool-feature # Tech Design + auto-generated feature specs
/spec-forge:review cool-feature # Review before implementation
/code-forge:plan @docs/features/ # Generate implementation planHanding work to an implementation team or vendor: give them docs/<name>/srs.md. It carries the scope boundaries, the field rules, the acceptance criteria, and the change procedure. Keep prd.md internal — it contains go/no-go reasoning and market analysis that is not theirs to act on.
The chain is two levels of one traceability chain, not competing numbering schemes. PRD-*-NNN identifies a business capability (a scope-and-priority decision); FR-*-NNN identifies a system behavior (the delivery contract). The relationship is one-to-many.
[Idea Draft] ──→ [PRD] ──→ SRS ──→ Tech Design ──→ Feature Specs
ideas/<name>/ docs/<name>/ docs/<name>/ docs/<name>/ docs/features/
draft.md prd.md srs.md tech-design.md *.md
PRD-MOD-NNN FR-MOD-NNN components auto-generated
demand capabilities system behavior trace to in Step 7
validation + priority + acceptance FR/NFR IDs
↓
/code-forge:plan @docs/features/Brackets mark conditional stages. The SRS and tech design are not optional: skipping the SRS to reach the design faster produces a design resting on unstated requirements, and code whose correctness nobody can settle.
Coverage is checked, not assumed: sf-trace.py matrix --upstream prd.md --downstream srs.md reports PRD capabilities with no requirement covering them and SRS references to PRD IDs that do not exist. The same check runs from SRS to tech design.
Each feature gets its own directory under docs/:
docs/<feature-name>/srs.md — the delivery contract (always generated by the chain)docs/<feature-name>/tech-design.md — architecture and design (always generated by the chain)docs/<feature-name>/prd.md — business case (conditional; generated when a go/no-go decision is still open)Auto-generated feature specs go to docs/features/:
docs/features/overview.md (feature index + dependency graph)docs/features/<component-name>.md (per-component implementation spec)On-demand documents (when explicitly requested):
docs/<feature-name>/test-cases.md — a standalone QA coverage matrix. Not part of the chain: tests are derived from the SRS acceptance criteria by code-forge:tdd. spec-forge owns requirements and design; code-forge owns implementation and verification.For decomposed projects, a manifest is also generated:
docs/project-<project-name>.mdBrainstorming ideas are stored in the project's ideas/ directory. Add ideas/ to .gitignore to keep them private, or commit for team collaboration.
[code-forge](https://github.com/tercel/code-forge) — spec-forge handles upstream specification (what to build and why), code-forge handles downstream execution (how to build it and ship it).
spec-forge works perfectly standalone — code-forge is optional.
If code-forge is not installed, each command's "Next Steps" section provides general guidance for moving forward with implementation.
/plugin install tercel/spec-forgeMIT License
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.