spec-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Spec-driven development transforms feature requests into structured specs through sequential phases, then executes them task-by-task.
| Situation | Command |
|---|---|
| New feature, want guidance | /ralph-specum:start <name> <goal> |
| New feature, skip interviews | /ralph-specum:start <name> <goal> --quick |
| Large feature needing decomposition | /ralph-specum:triage <goal> |
| Resume existing spec | /ralph-specum:start (auto-detects) |
| Jump to specific phase | /ralph-specum:<phase> |
start/new -> research -> requirements -> design -> tasks -> implementEach phase produces a markdown artifact in ./specs/<name>/. Normal mode pauses for approval between phases. Quick mode runs all phases then auto-starts execution.
| Command | Agent | Output | Purpose |
|---|---|---|---|
/ralph-specum:research | research-analyst | research.md | Explore feasibility, patterns, context |
/ralph-specum:requirements | product-manager | requirements.md | User stories, acceptance criteria |
/ralph-specum:design | architect-reviewer | design.md | Architecture, components, interfaces |
/ralph-specum:tasks | task-planner | tasks.md | POC-first task breakdown |
/ralph-specum:implement | spec-executor | commits | Autonomous task-by-task execution |
For features too large for a single spec, use epic triage to decompose into dependency-aware specs.
triage -> [spec-1, spec-2, spec-3...] -> implement each in orderEntry points:
/ralph-specum:triage <goal> -- create or resume an epic/ralph-specum:start -- detects active epics, suggests next unblocked specFile structure:
specs/
_epics/<epic-name>/
epic.md # Triage output (vision, specs, dependency graph)
research.md # Exploration + validation research
.epic-state.json # Progress tracking across specs
.progress.md # Learnings and decisions| Command | Purpose |
|---|---|
/ralph-specum:status | Show all specs and progress |
/ralph-specum:switch <name> | Change active spec |
/ralph-specum:cancel | Cancel active execution |
/ralph-specum:refactor | Update spec files after execution |
/ralph-specum:start my-feature "Build X" --quick
# Runs all phases automatically, starts execution/ralph-specum:start my-feature "Build X"
# Interactive interviews at each phase
# Review and approve each artifact
/ralph-specum:implement/ralph-specum:triage "Build entire auth system"
# Decomposes into: auth-core, auth-oauth, auth-rbac
/ralph-specum:start # Picks next unblocked spec~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.