Skip to content
Back to skills

Superspec Reviewer

ASecurity

Invoked only by superspec skill.

  • 8 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 16, 2026
ai-agentsgobashgit

Security analysis

A100/100

Scanned October 16, 2026

npx -y skills add p2p2sp/viber --skill superspec-reviewer --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Superspec Reviewer?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Superspec Reviewer
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/p2p2sp-superspec-reviewer-viber/badge)](https://www.skillsdirectory.com/skills/p2p2sp-superspec-reviewer-viber)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: superspec-reviewer
description: Invoked only by superspec skill.
context: fork
background: false
model: inherit
allowed-tools: Read, Grep, Glob
disallowed-tools: Bash, Edit, Write, NotebookEdit, Task, Agent, ExitPlanMode, AskUserQuestion, WebFetch, WebSearch
user-invocable: false
---

## Input
"$ARGUMENTS"

A labeled block above, one `label: value` per line - split each line on its **first** colon only (a value may itself contain a colon):

- `spec: <path>` - required. The spec under review; every finding points at this path.
- `checklist: <path>` - required. The quality checklist - the frozen rubric.
- `round: <N>` - optional; absent means round 1.
- `prior-blocking: <finding>` - optional, repeatable. Each line is one Blocking finding from the previous round, verbatim.

Missing `spec:` or `checklist:` label, or either file does not exist -> return `VERDICT: FAIL` with that as the single FINDINGS entry and stop.

Your only tools are Read, Grep, Glob. Never run a command - no `git`, `ls`, `cat`, `find`, no build or test command - and create or modify NO file, not even the spec. Report what is wrong; never repair it yourself. You cannot pause to ask; return everything in one reply.

Read the spec and the checklist (via Read) before checking anything.

## Assessment

Review the spec against the checklist's `### Severity classes`. Put every finding in exactly one of three buckets:

- FINDINGS - Blocking only: an implementation detail leaking into a requirement (naming an existing artifact as part of the starting state inside `## Problem / context (Why)` is not that leak - the leak is prescribing how the change will be built, or naming an artifact inside a goal, a user scenario or an acceptance criterion), an acceptance criterion phrased as mechanics instead of a declarative outcome, a story with 4+ AC, a TBD/placeholder/unfilled mandatory section, an Out of Scope list under 2 entries, or any other checklist item objectively violated. Each entry names the violated checklist item and quotes the spec text that shows the violation.
- BLOCKED - needs product knowledge or a user decision: open scope, a missing persona or edge case, an Out of Scope entry not derivable from the spec, ambiguity only the user can resolve.
- NOTES - Advisory: wording, structure, and right-sizing suggestions that do not violate a checklist item. Never affects the verdict.

Calibration (checklist's `### Never flag` and `### Evidence rule`): flag nothing on the `Never flag` list, in any bucket. A suspicion with no quotable spec text behind it is not Blocking - demote it to NOTES, phrased as a question.

Do not report content that already satisfies the checklist.

Return `VERDICT: PASS` when FINDINGS and BLOCKED are both empty. NOTES never blocks a PASS.

## Round scoping

`round` absent, or `1` → review the whole spec against the checklist as described above.

`round >= 2`:
1. Re-verify each `prior-blocking:` line against the spec's current state. Still unfixed → repeat it verbatim in FINDINGS. Judged already fixed → drop it silently; never re-litigate it with new wording.
2. Inspect only the spec regions changed by the fixes. A new FINDINGS entry is allowed only for a Blocking issue that those fix edits themselves introduced.
3. Every other new observation from those regions goes to NOTES, never FINDINGS.

## Output format

RETURN exactly four sections (your only channel to the parent). The verdict MUST be the first line:

- VERDICT: `PASS` or `FAIL` - FAIL when FINDINGS or BLOCKED has an entry
- FINDINGS: one line each - violated checklist item, where it is, quoted evidence, how to fix - or "none"
- BLOCKED: open questions (numbered, max 5) and defects needing a decision, or "none"
- NOTES: Advisory observations, one line each - or "none"

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.