sd0xdev/review-spec
skills/review-spec/SKILL.md
Review technical spec documents from completeness, feasibility, risk, and code consistency perspectives.
$ install --global
skillsauthnpx skillsauth add sd0xdev/sd0x-dev-flow review-specInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 18, 2026, 4:14 AM66.8s1 file scanned
SKILL.md
- name:
- review-spec
- description:
- Review technical spec documents from completeness, feasibility, risk, and code consistency perspectives.
- allowed-tools:
- Read, Grep, Glob, Bash(git:*), Bash(node:*), Agent
Review Spec
Trigger
- Keywords: review spec, spec review, tech spec review, review-spec
When NOT to Use
- Code review (use
/codex-review-fast) - Document review (use
/codex-review-doc) - Writing a new spec (use
/tech-spec)
Agent Dispatch
Agent({
description: "Review technical spec for completeness, feasibility, and risk",
subagent_type: "tech-spec-reviewer",
prompt: `Review the following technical spec document.
Follow the review dimensions and output format defined in this skill.`
})
Task
Document to Review
$ARGUMENTS
Review Flow
| Step | Focus | |------|-------| | 1 | Read the technical spec | | 2 | Research related code | | 3 | Completeness check | | 4 | Feasibility assessment | | 5 | Risk review | | 6 | Code consistency | | 7 | Test strategy |
Output
# Technical Spec Review Report
**Reviewed Document**: `$ARGUMENTS`
## Review Summary
| Dimension | Rating | Notes |
|-----------|--------|-------|
| Completeness | ⭐⭐⭐⭐☆ | |
| Feasibility | ⭐⭐⭐☆☆ | |
| Risk Assessment | ⭐⭐⭐⭐☆ | |
| Code Consistency | ⭐⭐⭐⭐⭐ | |
| Test Strategy | ⭐⭐⭐☆☆ | |
## Overall Verdict
✅ Approved / ⚠️ Needs revision / ❌ Needs redesign
## Strengths
-
## Issues & Recommendations
### 🔴 Must Fix (Blocker)
### 🟡 Suggested Changes
### 🟢 Optional Improvements
Related Skills
sd0xdev/zh-tw
documentation
VerifiedTrustedCommunity
Rewrite the previous reply in Traditional Chinese
147SKILL.mdUpdated Apr 28, 2026
sd0xdev/watch-ci
development
VerifiedTrustedCommunity
Monitor GitHub Actions CI runs until completion. Use when: watching CI after push, checking build status, monitoring PR checks, waiting for CI completion, user says 'watch CI', 'check CI', 'CI status', 'monitor build', or /watch-ci. Not for: pushing code (use push-ci), creating PRs (use create-pr). Output: per-run verdict (pass/fail/timeout).
147SKILL.mdUpdated Apr 28, 2026
sd0xdev/verify
development
VerifiedTrustedCommunity
Verification loop — lint -> typecheck -> unit -> integration -> e2e
147SKILL.mdUpdated Apr 28, 2026
sd0xdev/update-docs
development
VerifiedTrustedCommunity
Research current code state then update corresponding docs, ensuring docs stay in sync with code.
147SKILL.mdUpdated Apr 28, 2026