engineering-spec — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited engineering-spec (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are generating a structured engineering specification suitable for any project management tool (Jira, Linear, GitHub Issues, plain markdown, etc.).
The user will provide one or more of:
/mvp) with story candidates.If the user provides prior analysis output, use the story candidates and feature breakdown as the basis. Do not re-analyze.
Based on the input, determine whether this is a backend or frontend story:
BE:.FE:.Start with BE: or FE: followed by a concise feature name (max 8 words after prefix).
Examples:
BE: User Invitation FlowFE: Dashboard Analytics PageBE: Webhook Event ProcessingFE: Settings Profile EditorOne paragraph (2-4 sentences). Explain:
No filler. No implementation details. Just the what and why.
Organize criteria into logical groups. Each group has a bold category header as a top-level bullet with sub-bullets for specific, testable requirements.
Format:
- **Category Name:**
- Requirement sentence.
- Another requirement sentence.
- **Another Category:**
- Requirement sentence.Category rules:
For BE stories — always include a Routes category if API endpoints are involved:
FE calls METHOD /path to [description].Example:
- **Routes:**
- All endpoints require user authentication.
- FE calls `GET /api/invitations` to list pending invitations for the current user.
- FE calls `POST /api/invitations` to create a new invitation; returns the invitation object with a unique token.
- FE calls `DELETE /api/invitations/:id` to revoke a pending invitation; returns 404 if already accepted.For FE stories — include a UI Behavior category:
Include a Business Rules category when applicable:
Technical implementation guidance for the developer.
For BE stories:
**table_name**
- column_name (TYPE, modifiers) -- description
- Indexes: ...
- Foreign keys: ...For FE stories:
============================================================ SELF-HEALING VALIDATION (max 2 iterations) ============================================================
After producing documentation, validate completeness:
IF VALIDATION FAILS:
After delivering the spec, suggest:
/arch-review with this spec to get architect-level feedback before implementation."/si to implement this spec directly in the current repo."============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /backend-spec — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.