Skill-Audit-Bericht

openspec-plus-tdd Audit-Bericht.

MANDATORY skill that activates whenever code is written to implement an OpenSpec change task. Triggers: openspec-plus-apply is active, /opsx-apply is running, the user is implementing tasks from an OpenSpec change, an implementer subagent dispatched by openspec-plus-apply is starting work, or the user invokes phrases like 'TDD for the change', 'implementing change tasks', or 'writing tests for spec scenarios'. Load before any production code is written for an OpenSpec change. Enforces strict RED-GREEN-REFACTOR per test (any test — acceptance, unit, edge case, helper). Iron Law: NO PRODUCTION CODE WITHOUT A FAILING TEST. Gherkin scenarios in spec.md are the canonical source for acceptance tests (every scenario MUST become at least one test); additional unit, edge-case, and helper tests are encouraged and follow the same per-test cycle.

Blockiert · BlockierenRiskantErstellt 13. Okt. 2026Heuristisches Metadaten-Audit
74
Audit
67
Vertrauen
66
Qualität
77
Sicherheit
88
Maintain
92
Installieren

OpenAgentSkill Trust Score

67
Manuelle Prüfung

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub-Akzeptanz

Info

62

167 GitHub-Stars

Star-/Fork-Aktivität

Warnung

51

167 Stars und 9 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar

Aktuelle Wartung

Bestanden

88

1 Monate seit dem letzten Push

Lizenzklarheit

Bestanden

86

MIT

README/SKILL.md-Vollständigkeit

Bestanden

86

Metadaten enthalten ausreichend Nutzungs- und Workflow-Kontext

Abhängigkeits-/Laufzeitrisiko

Info

72

Zugriff auf Zugangsdaten oder Umgebungsvariablen

Installationsverfügbarkeit

Bestanden

92

npx skills add sudokar/openspec-plus --skill openspec-plus-tdd

Sicherheit des Installationsbefehls

Bestanden

92

Standard-Paket- oder Laufzeit-Installationspfad

Berechtigungsumfang

Warnung

60

secrets or environment access, filesystem or document access

Repository-Nachweis

Bestanden

86

https://github.com/sudokar/openspec-plus/tree/main/skills/openspec-plus-tdd

Prüfstatus

Info

66

KI-Prüfdaten verfügbar

Agent-validierte Ergebnisse

Info

54

Noch keine Agent-Ergebnisdaten

Prüfungen

Installations- und Adoptionsprüfung

6 Bestanden · 14 Prüfung nötig

Installationspfad

92

Bestanden

npx skills add sudokar/openspec-plus --skill openspec-plus-tdd

Repository

88

Bestanden

https://github.com/sudokar/openspec-plus/tree/main/skills/openspec-plus-tdd

Lizenz

86

Bestanden

MIT

Wartung

88

Bestanden

1 Monate seit dem letzten Push

KI-Prüfung

55

Prüfen

The 'delete it, start over' rule in the Iron Law could be interpreted as authorizing destructive deletion; it should explicitly scope deletion to only code the agent just wrote for the current slice and never pre-existing or unrelated files.

README/SKILL.md-Vollständigkeit

86

Bestanden

Usable description available

Abhängigkeitsrisiko

72

Prüfen

Zugriff auf Zugangsdaten oder Umgebungsvariablen

Sicherheit des Installationsbefehls

92

Bestanden

Standard-Paket- oder Laufzeit-Installationspfad

Berechtigungsumfang

60

Prüfen

secrets or environment access, filesystem or document access

Star-/Fork-Aktivität

51

Beheben

167 Stars und 9 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar

Akzeptanz

68

Info

167 GitHub-Stars

Warnungen

  • Permission surface may require sandboxing
  • Potential broker, wallet, exchange, or real-money execution surface; sandbox and explicit approval are required
  • The 'delete it, start over' rule in the Iron Law could be interpreted as authorizing destructive deletion; it should explicitly scope deletion to only code the agent just wrote for the current slice and never pre-existing or unrelated files.
  • SKILL.md does not include an explicit Outputs/Definition-of-done section or a clear Limitations section; the provided excerpt also appears truncated, so the packaged SKILL.md should be checked for completeness.
  • No explicit safe-operating-boundary statement is present in the provided content, such as no shell commands, no secret access, and no file modifications outside the current OpenSpec change slice.
  • This skill may touch real-money trading, broker, wallet, or exchange operations; use only in a sandbox with explicit approval.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, filesystem or document access
  • Stars/forks activity: 167 stars, 9 forks; issue activity unavailable in current metadata
  • Permission surface: secrets or environment access, filesystem or document access

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Nahe Optionen vergleichen

Ähnliche Skills als Nächstes prüfen