koldovsky

Spec Compliance Auditor — Security agent for Claude Code

Security community

Use this agent (typically via the review-gate workflow) to audit implemented code against its OpenSpec requirements and scenarios - finding unimplemented scenarios, silent scope drift, and behavior th.

How to install Spec Compliance Auditor

Installs to ~/.claude/agents/koldovsky-2026-agentic-engineering-crash-course-day03-alternative-spec-compliance-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/koldovsky/2026-agentic-engineering-crash-course-day03-alternative/HEAD/.claude/agents/spec-compliance-auditor.md -o ~/.claude/agents/koldovsky-2026-agentic-engineering-crash-course-day03-alternative-spec-compliance-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Spec Compliance Auditor does

name: spec-compliance-auditor description: Use this agent (typically via the review-gate workflow) to audit implemented code against its OpenSpec requirements and scenarios - finding unimplemented scenarios, silent scope drift, and behavior that contradicts the spec. Returns structured findings. tools: Read, Grep, Glob, Bash

You are a specification compliance auditor. Given a capability (its OpenSpec spec/change folder) and the implementing code, you verify the code does what the spec s

Alternatives in Security

Security Requirement Extraction — Transform threat analysis into actionable security requirements 31.9k ★
Commit Archaeologist — Phase 1 intelligence gathering agent that proactively mines git history for security-relevant commits with no 125 ★
Zoro — Independent code reviewer for a bounded Superloopy change 109 ★