AgentStack
SKILL verified MIT Self-run

Goal Spec Review

skill-marcoax-skills-goal-spec-review · by marcoax

Pre-flight audit of a /goal spec: verifies that objectives are clear and fixed, and that completion criteria are explicit and checkable BEFORE coding begins. Use when the user invokes /goal with a spec file or inline plan. If objectives are vague or success criteria are missing or unverifiable, stop and ask — do not start coding until the user has defined how 'done' will be measured. Safety check…

No reviews yet
0 installs
3 views
0.0% view→install

Install

$ agentstack add skill-marcoax-skills-goal-spec-review

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Goal Spec Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Goal Spec Review

A 30-second audit prevents silent wrong decisions during implementation.

Skip only if the user says "skip review" or "just implement it". Safety checks (§ Safety) are never skippable.

Procedure

Invocation: /goal implement path/to/plan.md

  1. Read the spec end-to-end. No codebase exploration yet.
  2. Verify concrete claims (paths, IDs, symbols) with one quick pass.
  3. Objective gate — objectives must be clear and fixed. If vague → stop and ask.
  4. Completion-criteria gate — every objective needs a concrete, checkable signal of

done (a command that passes, an observable output, a file/state that exists). If missing or unverifiable → stop and ask, or escalate to grill-with-docs. Never proceed on an unmeasurable goal.

  1. Safety check (§ Safety) — block on destructive actions, sensitive-data exposure,

or security bypasses.

  1. Output the unclear points and wait for answers. If clean, say so and proceed.

Safety

Stop and require explicit approval — do not infer intent — if the spec involves:

  • Destructive actions (delete, drop, overwrite, reset) without confirmation.
  • Sensitive-data exposure (credentials, PII, secrets) in logs, output, or files.
  • Security violations (bypassing auth, disabling checks, unauthorized paths).

Language

Write the review in the same language as the spec.

What to flag

Rule: only flag points that change what gets built, not how.

  • Objectives without checkable criteria — no definition of done, or "works correctly" / "verify manually" when an automated check is feasible.
  • Spec/code contradictions — e.g. spec says id 56 is a time field, code shows Date.
  • Lists/mappings that don't add up — counts, ranges, items in the wrong bucket.
  • Open questions — anything "to decide", or two conflicting instructions in one bullet.
  • Scope edges with no decision — e.g. "patch related files too?" needs a yes/no.
  • Dangling references — files/IDs/symbols that don't exist in the current branch.
  • Complex transforms without a worked example — wire↔UI, encode/decode, format conversions need an input→output example per direction.

Don't flag: style/naming taste, hypotheticals not in the spec, details left to your judgment, or anything one grep/read resolves — just resolve it silently.

Output format

## Spec review —

Found point(s) to clarify before I start:

  1. **** — .

Why it matters: .

Please confirm each before I proceed.

If clean: ## Spec review — then No ambiguities. Starting implementation.

Keep each point to 2 lines. Hard cap: 7 points — if you'd list more, recommend grill-with-docs; the spec needs rework, not clarification.

Escalation

Suggest grill-with-docs when completion criteria are too vague to measure, or when there are more than 3 structural ambiguities (points that change what gets built):

> The spec has several structural gaps. Want to run grill-with-docs for a deeper > stress-test before I start?

Don't suggest this for cosmetic ambiguities.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.