jpoleyCommunity·16 Agent Skills Included

flowspec

Spec-driven development workflows with security scanning and task tracking

Guides software features from specification through planning, implementation, and validation using structured workflow commands. Eliminates vague prompts, untracked work, and missed security issues by generating PRDs, architecture decisions, and backlog tasks automatically. Includes built-in security scanning, vulnerability triage, and fix generation to ship safer code faster.

50|9

↗

npx skills add jpoley/flowspec --all -g -y

Available:

Gives your AI agent strict operating rules for this project, including planning before changes, never editing task files directly, running tests before finishing, and following the spec-driven workflow phases.

All Skills in This Repository (16)

Pure Emerald Level Indicators

📦 In Repo

jpoley

security-analyst

Classify security findings with OWASP, CWE, and CVSS v3.1 scoring.

Security Triage Skill

Classify security findings from Semgrep, CodeQL, and SARIF outputs.

security-fixer

Generate secure patches for code vulnerabilities and output unified diffs.

security-workflow

Convert security findings into backlog tasks with severity-based priorities and acceptance criteria.

context-extractor

Extract All Needed Context sections from PRD markdown files into structured JSON bundles.

fuzzing-strategist

Automates design and evaluation of fuzzing strategies for parsers, protocols, and decoders.

gather-learnings

Scan memory/learnings to generate a Gotchas table for PRD/PRP sections.

qa-validator

Plan, execute, and validate software quality through structured QA workflows.

Security Custom Rules Skill

Draft custom security rules for Semgrep and Bandit with testing and documentation.

architect

Generate and format Architecture Decision Records with standard templates.

sdd-methodology

Guide Spec-Driven Development workflows across assessment, specification, research, planning, implementation, and validation.

security-reporter

Consolidates vulnerability findings into audit reports with risk assessment and compliance mapping.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install flowspec?▼

Run `npx skills add jpoley/flowspec --all -g -y` in your terminal to install all skills in this suite globally.

What is spec-driven development?▼

It is a workflow where you write structured specifications first, then let your AI agent generate plans, code, and tests from them. Flowspec walks you through assess, specify, plan, implement, and validate phases.

How does flowspec handle security vulnerabilities?▼

It scans code with tools like Semgrep and CodeQL, triages findings by severity, and generates ready-to-apply patches. It can also create prioritized backlog tasks for each vulnerability automatically.

Does flowspec work with Claude Code and other AI coding tools?▼

Yes. It ships templates for over 13 AI coding assistants including Claude Code, GitHub Copilot, Cursor, and Windsurf, all driven by the same workflow commands.

Can I use flowspec for small bug fixes?▼

Yes. The assess step scores feature complexity and recommends skipping the full workflow for simple fixes, so you only use heavy process when it adds value.