.agents/skills/spec-mode/SKILL.md
Use when the user asks to structure work as specifications, requirements, design docs, team task lists, or a `.spec/<slug>/TASK.md + Requirements.md + Design.md` workflow in Russian. Use this skill to scaffold and maintain spec packs with traceability between subtasks and requirements.
npx skillsauth add kissrosecicd-hub/agents-evolution spec-modeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill when the task is about:
.spec/<slug>/TASK.md, Requirements.md, Design.md.spec/ yet..spec/<slug>/TASK.md, Requirements.md, Design.mdscripts/init_spec_pack.shSKILL.md lean; read references only as needed.Task -> Requirements -> Design_Requirements: 1.1, 2.3_TASK.md must have its own responsibility block:
ownerowner may be:
owner may also contain several explicit executors if the owner of the plan wants shared execution.owner blocks in TASK.md.TASK.md.TASK.mdtemplates/TASK.template.mdtemplates/Requirements.template.mdtemplates/Design.template.mdtools
KISS reference skill for v2rayA on Arch/Ubuntu/Fedora with TUN, RoutingA, DoH DNS and Outline key import.
testing
Identifies dependencies at heightened risk of exploitation or takeover. Use when assessing supply chain attack surface, evaluating dependency health, or scoping security engagements.
development
Run Semgrep static analysis scan on a codebase using parallel subagents. Supports two scan modes — "run all" (full ruleset coverage) and "important only" (high-confidence security vulnerabilities). Automatically detects and uses Semgrep Pro for cross-file taint analysis when available. Use when asked to scan code for vulnerabilities, run a security audit with Semgrep, find bugs, or perform static analysis. Spawns parallel workers for multi-language codebases.
development
Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant, secure defaults, API usability, dangerous configuration.