AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Osx Review Artifacts

skill-amauryconstant-openspec-extended-osx-review-artifacts · by amauryconstant

Review OpenSpec artifacts for feasibility, correctness, completeness, and implementation-readiness. Use BEFORE implementation to validate the plan is sound, or during artifact creation to check quality. Part of pre-implementation workflow: review-artifacts → modify-artifacts → apply.

No reviews yet
0 installs
25 views
0.0% view→install

Install

$ agentstack add skill-amauryconstant-openspec-extended-osx-review-artifacts

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-amauryconstant-openspec-extended-osx-review-artifacts)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
3mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Osx Review Artifacts? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Review OpenSpec artifacts for feasibility, correctness, completeness, and implementation-readiness.

IMPORTANT: This skill is for reviewing BEFORE implementation begins. Do not use after apply-change. For post-implementation verification, use osc-verify-change (originally openspec-verify-change) instead.


Input

Optionally specify a change name. If omitted, the skill will infer from context or prompt for selection.

Arguments: [change-name] [artifact-type]

Examples:

  • /osx-review add-auth - Review all artifacts in "add-auth"
  • /osx-review add-auth proposal - Review only proposal.md
  • "Review the design" - Infer change from context

Workflow Context

This skill is part of the pre-implementation review cycle:

[new-change] → [draft artifacts] → [review-artifacts] → [modify-artifacts] → [apply]
                                    ↑_______________|
                                       (iterate until ready)

After apply: Use osc-verify-change (originally openspec-verify-change) to confirm implementation matches specs. After verify passes: Use osc-archive-change (originally openspec-archive-change) to finalize.


Steps

  1. Select the change

If a name is provided, use it. Otherwise:

  • Infer from conversation context
  • Auto-select if only one active change exists
  • If ambiguous: run openspec list --json and use the AskUserQuestion tool to let the user select

Always announce: "Reviewing change: "

  1. Check change status

``bash openspec status --change "" --json ``

Parse the JSON to understand:

  • schemaName: The workflow being used
  • artifacts: Array of artifacts with their status
  1. Determine review scope

If an artifact type is specified, review only that artifact. Otherwise, review all artifacts in the change.

  1. Review each artifact

For each artifact, check:

Format Validation:

  • All required sections present
  • Correct header levels (especially scenario headers at ####)
  • Proper checkbox format in tasks (- [ ] / - [x])

Content Quality:

  • Specificity over vagueness
  • Clear, actionable language
  • Proper use of SHALL/MUST in specs

Implementation Readiness:

  • Dependencies are available and compatible
  • Scope is achievable
  • Tasks are specific enough to know when done
  1. Check cross-artifact consistency

Run these alignment checks:

proposal → specs:

  • New Capabilities in proposal = specs/ directory names
  • Modified Capabilities = existing spec names in openspec/specs/
  • Consistent kebab-case naming

specs → design:

  • All ADDED/MODIFIED requirements addressed in design
  • REMOVED requirements with migration notes have migration plan

design → tasks:

  • Decisions in design.md have corresponding tasks
  • Risks in design.md have mitigation tasks
  • Non-goals NOT in tasks.md

proposal → tasks:

  • What Changes items covered by task sections
  • Impact items considered
  1. Prioritize findings

Classify issues by severity:

  • Critical: Blocks implementation, must fix before apply
  • Warning: Should fix, may cause issues during implementation
  • Suggestion: Nice to have, non-blocking improvement
  1. Generate review report

Present findings with actionable feedback including line numbers and specific fixes.


Artifact Review Criteria

proposal.md

| Section | Required | Common Issues | |---------|----------|---------------| | ## Why | Yes | Missing entirely, too vague | | ## What Changes | Yes | "Improve X" without specifics | | ## Capabilities | Yes | Inconsistent naming vs specs | | ## Impact | Recommended | Missing migration considerations |

Good example: "Add rate limiting to API endpoints to prevent abuse" Bad example: "Improve API"

specs/

| Element | Format | Common Issues | |---------|--------|---------------| | Section header | ## ADDED / ## MODIFIED / ## REMOVED | Wrong section names | | Requirement | ### Requirement: | Missing colon | | Scenario | #### Scenario: | Using ### instead of #### | | Keywords | SHALL, MUST for mandatory | Using "should" ambiguously |

Scenario format:

#### Scenario: Valid credentials
- **GIVEN** a user with valid credentials
- **WHEN** user submits login form
- **THEN** a JWT token is returned

design.md

| Section | Required | Common Issues | |---------|----------|---------------| | ## Context | Yes | Missing existing system context | | ## Decisions | Yes | No rationale for decisions | | Alternatives | Under ## Decisions section | Not considering alternatives | | ## Trade-offs | Recommended | Missing or superficial |

Decision format:

### Decision 1: Use JWT for authentication

**Rationale**: Stateless, widely supported, works with microservices.

**Alternatives considered**:
- Session cookies: Requires shared state
- API keys: Less secure for user auth

tasks.md

| Element | Format | Common Issues | |---------|--------|---------------| | Section | ## 1. | Missing numbers, wrong format | | Task | - [ ] Task description | Using * instead of -, missing brackets | | Completion | - [x] Done task | Wrong checkbox format |

Correct format:

## 1. Backend Changes

- [ ] Add rate limiting middleware
- [ ] Update API documentation
- [ ] Add configuration for rate limits

## 2. Frontend Changes

- [ ] Add rate limit error handling
- [ ] Show retry countdown UI

Note: AGENTS.md documentation updates should NOT be tracked in tasks.md. They are handled by a separate documentation maintenance workflow.


Output

On Issues Found:

## Artifact Review: 

### ✅ Format: Valid
- All required sections present
- Header format correct

### ⚠️ Issues Found

#### Critical (Must Fix Before Implementation)
- **proposal.md:12**: Missing "Why" section context
  - Fix: Add 2-3 sentences explaining the business need

- **specs/auth.md:45**: Scenario uses wrong header level (### instead of ####)
  - Fix: Change to `#### Scenario: Valid credentials`

#### Warnings (Should Fix)
- **design.md:23**: Decision lacks rationale
  - Better: Add "Rationale:" explaining why this approach was chosen

#### Suggestions (Nice to Have)
- **tasks.md:8**: Consider splitting "Implement auth" into smaller tasks
  - Consider: "Add login endpoint", "Add token validation", "Add refresh flow"

### Consistency Check
- ❌ proposal Capabilities don't match specs/ structure
  - Proposal mentions "user-management" but specs/ has "users"

**Next Steps:**
- Fix critical issues: `/osx-modify `
- Re-review after fixes: `/osx-review `

On All Clear:

## Artifact Review: 

### ✅ All Checks Passed

**Format**: All artifacts properly structured
**Content**: Clear, specific, actionable
**Consistency**: Cross-artifact alignment verified
**Readiness**: Ready for implementation

**Next Steps:**
- Start implementation: `/osx-apply `

Guardrails

  • Review BEFORE implementation, not after
  • Be specific: include file names, line numbers, exact fixes
  • Prioritize by severity: critical → warning → suggestion
  • Check cross-artifact consistency, not just individual files
  • Don't approve changes with critical issues
  • Suggest /osx-modify for fixes, don't fix yourself during review
  • For post-implementation verification, use osc-verify-change instead

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.