Install
$ agentstack add skill-felipefontoura-pi-sdd-kit-sdd-review ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
SDD Review
Validate implementation against the approved SDD artifacts.
Purpose
Review checks whether the delivered code matches the product requirements, technical design, task plan, and project quality bar. It creates a concise but actionable review.md artifact.
Workflow
- Load the SDD reference.
- Read
../_shared/references/sdd-practical.md. - Apply the Language Policy: respond and write artifacts in the user's initial chat language while keeping skill instructions and templates in EN-US.
- Read
../_shared/references/templates.mdwhen writing the review artifact. - Use package-level
templates/review.mdas the user-facing template when available. - Use the SDD Handoff Template and package-level
templates/handoff.mdwhen refreshing.ai/sdd/handoff/sdd-brief.mdafter review. - Load relevant
.ai/steering/*.mdfiles when present, especially conventions, principles, and verification rules.
- Locate the feature and validate the gate.
- Use
.ai/sdd/specs/NNN-feature-name/. - Read
.status. - Validate
.statusagainst the official status values fromsdd-practical.md. - If
.statusis missing or invalid, stop and ask the user to repair it; do not infer implementation completion from files or task checkboxes alone. - Prefer reviewing after
implementation:done. - If status is
implementation:in-progress, state that the review is partial and do not set.statustoreview:done. - If status is earlier than
implementation:in-progress, block unless the user explicitly asks for a non-final artifact review. - Read
requirements.md,design.md,tasks.md, anddecisions.mdif present.
- Identify review scope.
- Use files listed in
tasks.mdas the starting scope. - Inspect current repository changes when available.
- If scope is unclear, ask the user which files or feature area to review.
- Review against the spec.
- Check each functional requirement and acceptance criterion.
- Check that design decisions and edge cases were implemented or intentionally updated.
- Check task completion claims against actual code.
- Flag missing, partial, or divergent behavior.
- Review code quality.
- Evaluate correctness, security, accessibility, performance, error/loading/empty states, maintainability, and tests.
- Focus on high-signal findings.
- Do not flag style issues already covered by formatters unless they indicate a larger problem.
- Deduplicate repeated issues into one finding with affected files listed.
- Verify.
- Run project verification commands when available.
- At minimum, run or identify lint/test/build equivalents for the stack.
- If commands cannot run, document why and perform manual verification where possible.
- Write review.
- Use the Review Template from
../_shared/references/templates.md. - Save as
.ai/sdd/specs/NNN-feature-name/review.md. - Include coverage tables for requirements, tasks, and design decisions, plus quality check, verification result, issues found, and verdict.
- Set
.statustoreview:doneonly when starting fromimplementation:done, the review is complete, and the verdict is not blocked by missing information. - Do not advance
.statusfor partial or non-final artifact reviews. - Update
.ai/sdd/INDEX.mdwith the current status when practical; if not updated, tell the user the index may be stale.
- Refresh the SDD handoff when review is complete.
- If
.statusbecomesreview:done, update.ai/sdd/handoff/sdd-brief.mdwith review verdict, verification evidence summary, known follow-ups, blockers, and readiness for QA/release. - Preserve exact source paths to the reviewed spec artifacts.
- Do not mark ready for release when verdict is
Needs fixesor verification failed.
Verdict Rules
Approved: requirements pass, design is followed, verification passes, no blocking issues.Approved with follow-ups: core requirements pass, only low/medium non-blocking issues remain.Needs fixes: any Must Have requirement fails, verification fails, or high/critical issue exists.
Output
.ai/sdd/specs/NNN-feature-name/review.md- Updated
.statuswhen complete - Refreshed
.ai/sdd/handoff/sdd-brief.mdwhen.statusbecomesreview:done
Critical Rules
- Do not fix issues in this skill unless the user explicitly asks to switch to implementation.
- Do not mark review done if verification was skipped without explanation.
- Do not infer implementation completion from files or task checkboxes alone; require valid
.status. - Do not approve code that diverges from requirements, design, or traceability mappings unless the spec has been explicitly updated.
- Do not create noisy review reports; prioritize actionable findings.
- Do not use the handoff to hide review failures; blockers and failed verification must be explicit.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: felipefontoura
- Source: felipefontoura/pi-sdd-kit
- License: MIT
- Homepage: https://felipefontoura.com/articles/spec-driven-development-with-claude-code
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.