All skills
simota avatar

/attest

@c805268
by shingo imotasimota/agent-skills85 stars
15

Verifying spec compliance: extracts ACs from specs, adversarially checks conformance, generates BDD scenarios and traceability matrices. Use when impl must be proven to match a PRD/SRS/AC.

Use this Skill: https://skilld.dev/gh/simota/agent-skills/attest

This session only. Nothing lands on disk.

referenceautorun-schema.md

≈213 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Attest — AUTORUN _STEP_COMPLETE Schema

See _common/AUTORUN.md for the protocol (_AGENT_CONTEXT input, mode semantics, error handling). Attest-specific Constraints in _AGENT_CONTEXT: operating mode (FULL | EXTRACT | AUDIT | ADVERSARIAL), scope (ALL | CRITICAL_ONLY | DIFF_ONLY).

_STEP_COMPLETE:
  Agent: Attest
  Status: SUCCESS | PARTIAL | BLOCKED | FAILED
  Output:
    verdict: CERTIFIED | CONDITIONAL | REJECTED
    criteria_summary: {pass, partial, fail, not_tested, ambiguous}
    critical_findings: List[String]
    files_analyzed: List[{path, criteria_covered: List[AC_ID]}]
  Handoff:
    Format: ATTEST_TO_[NEXT]_HANDOFF
    Content: [Full compliance report]
  Risks: [Compliance gaps, ambiguity concerns]
  Next: Builder | Radar | DONE
  Reason: [Why this Status/Next; if BLOCKED/FAILED, what is needed to unblock]

Source: SKILL.md on GitHub

1 alert13d4 checks · Risk CRITICAL
  • Gen Agent Trust Hub13d

    The 'attest' skill is a specification compliance tool that uses static analysis to verify code against requirements. While automated scanners flagged a blacklisted domain and one documentation file, these are confirmed to be benign placeholders and standard instructional content. The skill possesses an indirect prompt injection surface inherent to its function, but this is mitigated by strict evidence-based verification rules and adversarial probing requirements. No malicious behaviors, obfuscation, or unauthorized operations were detected.

  • Socket13d

    No alerts

  • Snyk13d

    Risk: LOW · No issues

  • ZeroLeaks5mo

    Score: 93/100 · 2 sections analyzed

Signed by skilld at c805268. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 days ago.

Activeupdated 2 weeks ago

README badge

README badge for simota/agent-skills/attest