spec-to-code-compliance
仓库创建 2026年1月15日最近提交 1 小时前SkillHot 收录 1 小时前
▸ 精选理由
快速定位规格与实现差异，适合安全审计与合规检查。
▸ 风险提示
需要访问代码仓库与可能的敏感源码。
这个 Skill 做什么
把实现代码与规格/白皮书逐条比对，找出一致、矛盾或缺失之处。
把实现代码逐条对照规格或 whitepaper，找出哪些需求被实现、哪些相互矛盾或缺失，以及代码里多出来但文档没提的行为。在做实现与设计不一致排查、合规审计或发布前校验时特别有用。输出逐项对照结论，能帮助判断问题是代码的 bug 还是文档需要修订。
▸ 展开 SKILL.md 英文原文
Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions. Use when comparing an implementation against a whitepaper, protocol spec, or design document.
6.5k
Stars
557
Forks
40
仓库内 Skill
+445
7 日增星
安装 / 使用
给你的 Agent 一句话（通用）
帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/spec-to-code-compliance/skills/spec-to-code-compliance/SKILL.md或 curl 直取 SKILL.md
curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/spec-to-code-compliance/skills/spec-to-code-compliance/SKILL.md"SKILL.MD 节选查看完整文件 ↗
# Spec-to-Code Compliance Two artifacts disagree, and the job is to find where. The documentation says what the system does; the code decides what it actually does. Every gap between them is either a bug or a documentation fix, and which one it is is the finding. ## When to Use You have both documentation describing intended behavior and the code that should implement it. A whitepaper against a protocol, a design note against a service, a README's stated guarantees against the functions behind them. Most useful when the document is authoritative — something a client wrote, published, or is audited against — because then a divergence is a defect rather than stale prose. ## When NOT to Us
via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有