sc30gsw/vcsdd-adversary
skills/vcsdd-adversary/SKILL.md
Run Phase 3 (adversarial review) for the active VCSDD feature. Spawns a fresh vcsdd-adversary agent with zero Builder context to review implementation against spec. Produces binary PASS/FAIL verdict per dimension.
$ install --global
skillsauthnpx skillsauth add sc30gsw/vcsdd-claude-code vcsdd-adversaryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 7:35 PM14.8s1 file scanned
SKILL.md
- name:
- vcsdd-adversary
- description:
- Run Phase 3 (adversarial review) for the active VCSDD feature. Spawns a fresh vcsdd-adversary agent with zero Builder context to review implementation against spec. Produces binary PASS/FAIL verdict per dimension.
What
Runs the adversarial review (Phase 3). Spawns a fresh vcsdd-adversary agent (opus model, review-output-only, zero Builder context) to review the implementation against the spec across 5 dimensions.
When
Run after /vcsdd-impl completes Phases 2b and 2c. Requires active feature at phase 2c. In strict mode, /vcsdd-contract-review must already have produced a PASS verdict for the current sprint contract.
How
- Resolve sprint number from
state.json.sprintCount(created when Phase 2a starts) - In strict mode, validate contract gate before review:
contracts/sprint-N.mdmust exist- frontmatter must include
status: approved - the contract must define at least one
CRIT-XXXcriterion reviews/contracts/sprint-N/output/verdict.jsonmust exist andoverallVerdictmust bePASSreviewContext.contractPathmust referencecontracts/sprint-N.mdreviewContext.contractDigestmust still match the approved contract snapshotiterationmust equalnegotiationRound + 1
- Write review manifest to
reviews/sprint-N/input/manifest.json:{ "reviewType": "implementation", "featureName": "...", "sprintNumber": N, "contractPath": "contracts/sprint-N.md", "artifactsToReview": { "spec": ["specs/behavioral-spec.md", "specs/verification-architecture.md"], "tests": ["tests/..."], "source": ["src/..."] }, "reviewDimensions": ["spec_fidelity", "edge_case_coverage", "implementation_correctness", "structural_integrity", "verification_readiness"] } - Create output directories:
reviews/sprint-N/output/findings/ - Spawn FRESH vcsdd-adversary agent: this MUST be a new agent with no Builder context
- Collect outputs after adversary completes:
reviews/sprint-N/output/verdict.jsonreviews/sprint-N/output/findings/FIND-NNN.json(one per finding)
- Record gate:
recordGate(feature, '3', overallVerdict, 'adversary') - If PASS: transition to Phase 5 in all modes, display summary
- If FAIL: display findings grouped by dimension/category, proceed to
/vcsdd-feedback
Fresh Context Requirement
The adversary MUST be spawned as a new Agent instance. Do NOT:
- Pass Builder conversation history
- Share the current conversation context
- Let the adversary see Builder's reasoning
The adversary reads ONLY from disk (review manifest + source files).
Examples
/vcsdd-adversary
/vcsdd-adversary --sprint 2 # specify sprint number explicitly
Related Skills
sc30gsw/vcsdd-verification-architecture
documentation
VerifiedTrustedCommunity
Use this skill when writing Phase 1b verification architecture documents. Provides purity boundary mapping, proof obligation design, and tier assignment guidance.
20SKILL.mdUpdated Apr 16, 2026
sc30gsw/vcsdd-traceability
data-ai
VerifiedTrustedCommunity
Use this skill when creating or querying VCSDD Chainlink bead traceability. Provides bead creation patterns, chain traversal, and completeness validation.
20SKILL.mdUpdated Apr 16, 2026
sc30gsw/vcsdd-trace
data-ai
VerifiedTrustedCommunity
Display the full traceability chain for a VCSDD bead. Traverses the Chainlink graph from the given bead ID and shows all connected artifacts with status.
20SKILL.mdUpdated Apr 16, 2026
sc30gsw/vcsdd-tdd
development
VerifiedTrustedCommunity
Run Phase 2a (test generation, Red phase) for the active VCSDD feature. Invokes vcsdd-builder to generate failing tests for all spec requirements. Records red phase evidence.
20SKILL.mdUpdated Apr 16, 2026