# Vibe Spec Vs Code Audit

> Compares specification documents against implementation code to find divergences. Use when implementation of a spec or design doc is claimed complete.

- **Type:** Skill
- **Install:** `agentstack add skill-ash1794-vibe-engineering-spec-vs-code-audit`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [ash1794](https://agentstack.voostack.com/s/ash1794)
- **Installs:** 0
- **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [ash1794](https://github.com/ash1794)
- **Source:** https://github.com/ash1794/vibe-engineering/tree/master/plugins/vibe-engineering/skills/spec-vs-code-audit

## Install

```sh
agentstack add skill-ash1794-vibe-engineering-spec-vs-code-audit
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# vibe-spec-vs-code-audit

Specs drift from code. Code drifts from specs. This skill catches the gaps.

## When to Use This Skill

- Implementation of a spec/design doc is claimed complete
- After a major refactor that should still conform to a spec
- During periodic compliance checks
- When debugging unexpected behavior (maybe the code doesn't match the spec)

## When NOT to Use This Skill

- No spec or design doc exists (nothing to compare against)
- The spec is explicitly marked as aspirational/future
- Code was intentionally diverged with documented reasons

## Steps

1. **Identify the spec** — Find the specification document (design doc, PRD section, API spec, etc.)

2. **Identify the implementation** — Find the code files that implement this spec

3. **Line-by-line comparison** — For each requirement/section in the spec:
   - Find the corresponding code
   - Check: Does the code match the spec exactly?
   - If divergent: Record as a GAP

4. **Classify each gap**:
   - **ID**: GAP-[section]-[number] (e.g., GAP-AUTH-001)
   - **Type**: Missing (spec says X, code has nothing) / Incorrect (spec says X, code does Y) / Extra (code has X, spec doesn't mention it)
   - **Severity**: Critical (breaks core functionality) / High (wrong behavior) / Medium (incomplete) / Low (cosmetic)

5. **Report**:

## Output Format

### Spec vs Code Audit

**Spec**: [document name/path]
**Implementation**: [code path(s)]
**Gaps Found**: X (Y critical, Z high)

| GAP ID | Type | Severity | Spec Says | Code Does |
|--------|------|----------|-----------|-----------|
| GAP-AUTH-001 | Missing | Critical | "Tokens expire after 24h" | No expiration logic found |

### Top 3 Risks
1. [Most dangerous gap]

### Recommended Fix Order
1. [Fix critical gaps first]

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [ash1794](https://github.com/ash1794)
- **Source:** [ash1794/vibe-engineering](https://github.com/ash1794/vibe-engineering)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-ash1794-vibe-engineering-spec-vs-code-audit
- Seller: https://agentstack.voostack.com/s/ash1794
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.