solanabr

Spec Audit — Security skill for Claude Code

Security community

Spec-vs-code compliance audit — extracts requirements from a spec / whitepaper / RFC and matches each to the implementation with typed verdicts.

How to install Spec Audit

Installs to ~/.claude/skills/solanabr-auditor-skill-spec-audit/SKILL.md

Terminal
mkdir -p ~/.claude/skills/solanabr-auditor-skill-spec-audit && curl -fsSL https://raw.githubusercontent.com/solanabr/auditor-skill/HEAD/commands/spec-audit.md -o ~/.claude/skills/solanabr-auditor-skill-spec-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Spec Audit does


name: auditor:spec-audit description: Spec-vs-code compliance audit — extracts requirements from a spec / whitepaper / RFC and matches each to the implementation with typed verdicts. argument-hint: " [program-path]" allowed-tools: Read, Grep, Glob, Bash, Task

auditor-skill — Spec Compliance (Mode 5)

**Arguments:** $ARGUMENTS

  1. Extract a requirement list (Spec-IR) from the supplied spec.
  2. Run Phase 0 setup + Phase 0.5 Context Reconstruction; map each instruction / state

Alternatives in Security

  • Review Artifact — Creates one polished, self-contained HTML artifact from review findings, audit notes, PR feedback, code review 652 ★
  • Tier 3 Code Refinement Report — Date: 2026-03-20 Status: ALL 54 FINDINGS IMPLEMENTED Scope: Full codebase (18 plugins, 888 files, ~266K lines) 222 ★
  • CodexQB — CodexQB is a Codex plugin for evidence-backed repo comprehension, planning, QA audit, and gated implementation 186 ★

Full documentation available on GitHub

View Source Repository