create-specs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-specs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a thin orchestrator. Invoke each skill below by name, pass it the stated focus, and report a one-line progress summary at every step boundary (e.g. "Step 1/6 — context loaded: …", using the literal step numbers 0–6). Do not add phases, do not skip phases, do not inline work a skill owns.
Two standing rules, because sub-skill output buries the parent sequence and compaction silently drops instructions:
Input: $ARGUMENTS — an inline idea/brief, or a path/wikilink to a note in C:\Users\any0ne\vault\openlatch-vault. If empty, ask exactly one question: "What are we building?"
Goal: set a session goal now (SlashCommand /goal if available, otherwise state it and treat it as binding): "PRD '\<name\>' written to the vault per conventions (+ Initiatives if calibrated), Index.md updated, agent-ready bar met, spec-verify passed."
initiatives. Returns the verdict block: ambition tier, initiative-count hypothesis, and the question budget for step 2. This is also what keeps the spec's weight matched to the problem — a small change should not get four initiatives and sixteen criteria.vault+codebase, scoped to the product area of the idea (strategy notes, related PRDs, repo reality). Note the real file/module/endpoint names in the target repos — the docs will reference them concretely, not as vague nouns.product. Always run at full depth (never skip, regardless of calibrate tier): business context, value we want to create, state of the art, market research, competitive analysis.calibrate and say so. Wait for approval before writing.03-Product/PRDs/<Name>.md03-Product/PRDs/<Name>/I-<n>-<Kebab-Title>.mdtype, nested tags, created/last-updated, owner: Luc Delsalle, target-repos, brainstorm-folders left empty for /create-plans), section structures mirroring the exemplars (Admin Broadcast Messaging for PRDs, I-5.5 for Initiatives), wikilinks liberally, mandatory ## Related. If that context was compacted away, re-invoke learn-existing with focus vault first.03-Product/PRDs/Index.md if missing; add/update this PRD's row (status: Draft).spec. Fix every gap it reports. Beyond the vault contract, run each doc through two extra lenses:## Verification section, contracts are frozen in one canonical place (no divergent copies), non-goals are stated, acceptance criteria are testable.These docs are consumed by a coding agent (Claude Code) in a fresh session, not just read by humans. The evidence on spec-driven development (Anthropic's Claude Code best practices, GitHub Spec Kit, AWS Kiro) is blunt: an under-specified spec drops first-pass correctness by 20–40% and makes most of the code that compiles semantically wrong. So hold every PRD/Initiative to this bar — and explain, don't just assert, so the authoring step understands the intent:
- [ ] must be something a human or a test can mark pass/fail without arguing. "Filtering persists on refresh" ✓ ; "the UX feels smooth" ✗. For state-machine or error-heavy flows, EARS phrasing (WHEN … SHALL / IF … THEN) sharpens the criteria and maps cleanly to test cases.## Verification section (named tests, a runnable command, or a recipe that yields pass/fail); each PRD ends with an end-to-end recipe proving the feature works. Anthropic, verbatim: the most useful specs "end with an end-to-end verification step that proves the feature works." If it can't be verified, it isn't done./create-plans' job — don't pre-empt it — but the order between initiatives must never be implicit.calibrate decides) — over-specifying a trivial change wastes context and tangles the agent.Finish with a 5-line summary: docs created (paths), initiative decision and why, research highlights that shaped the PRD, confirmation the agent-ready bar is met (contracts frozen, every doc has its verification step), and the next command: /create-plans "<PRD name>".
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.