ralph-specum-requirements — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ralph-specum-requirements (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a coordinator, not a product manager -- delegate ALL work to a product-manager sub-agent.
Derive RALPH_CODEX_PLUGIN_ROOT from this loaded skill by resolving two parent directories from the SKILL.md directory. Never derive it from the project working directory.
.current-specresearch.md when present, .progress.md, and the current state.phase_gate.py mode through "$RALPH_CODEX_PLUGIN_ROOT/scripts/phase_gate.py" with STATE and exact --quick, exact --interactive, or no flag. Reject both, -q, variants, and natural-language substitutes.research.md exists, require its artifact approval in interactive mode; exact quick mode continues with the validated file. When it is absent, record that there is no upstream research artifact and require no prior-artifact approval.research.md exists, require skill discovery pass 2 against the goal plus final research. When it is absent, require pass 1 against the goal alone. Run the applicable pass when the state lacks its revision. Select explicitly named skills and record harness-shadowed duplicates."$RALPH_CODEX_PLUGIN_ROOT/skills/interview-framework-codex/SKILL.md", its required algorithm and domain-modeling references, and all selected domain contracts in both interactive and quick mode. In interactive mode, use its focused brainstorming method for critical user outcomes, scope exclusions, acceptance thresholds, and material non-functional requirements. Inspect existing behavior and terminology instead of asking.awaitingApproval: false before generation.approve and delegate; in exact quick mode, record bypassed_quick. In both modes, run phase_gate.py check-delegation with the current loaded-manifest identity before creating the child. Apply the shared hard-transition invariant before requirements writer dispatch. A failed check-delegation in either mode ends this invocation before phase transition, child dispatch, or target-artifact write; after a normal-mode failure, the next explicit invocation creates a fresh manifest/interview identity and does not create an alternate quick bypass. After an exact --quick delegation failure, the next explicit invocation reruns discovery, records a fresh phaseSkillLoad and interview identity, and does not reuse a terminal bypassed_quick interview or its discovery revision. Only a matching in-progress collecting or awaiting_confirmation interview is resumable.product-manager sub-agent. Pass the absolute helper path, state path, identity tuple, unique teammate dispatch identity, verbatim manifest, research context, goal, and interview results. The child reloads and records the manifest, passes check-agent-write with that unique identity, and writes requirements.md. Do NOT write requirements.md yourself.phase: "requirements" and awaitingApproval: true (or false when exact --quick is active)..progress.md with approved research context, user decisions, blockers, next step, skill discovery, and any epic constraints that must carry forward.continue to prototype, treat requirements.md as approved and route to $ralph-specum-prototype --suggested --return-phase design with the same resolved base path. Let that skill own prototype behavior and its return handoff.After requirements validation and review in quick mode:
research.md and requirements.md; let the prototype coordinator record a skipped result when no suitable question exists.$ralph-specum-prototype --quick --return-phase design.requestAttempt: 1. Keep it separate from builderExecutionAttempt; duplicate reuse, supersession, conflict resolution, skip, and lock failure consume the request without adding a builder execution.The result should include user stories, acceptance criteria, functional requirements, non-functional requirements, dependencies, exclusions, and success criteria.
requirements.md, name requirements.md and summarize the requirements briefly.quickMode is false, end with exactly one explicit choice prompt:approve current artifactrequest changescontinue to designcontinue to prototypecontinue to design as approval of requirements.md.continue to prototype as approval of requirements.md and route through $ralph-specum-prototype with returnPhase: design.--quick, do not show this prompt; continue directly to design after the phase gates and single Quick Prototype Gate request complete.apply the changes immediately delegates already-recorded feedback through a new unique dispatch, redisplays the artifact, and stays at this approval gate. Ask one focused change question only when no feedback is pending. Control-only continue, proceed, and go ahead approve nothing.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.