spec-audit

Audit software specifications for contradictions, security gaps, and compliance defects.

25|14|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/vlad-ryzhkov/AI-QA-workshop-feb19 --skill spec-audit-vlad-ryzhkov
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spec-audit
Source: https://github.com/vlad-ryzhkov/AI-QA-workshop-feb19/tree/main/.agents/skills/spec-audit
Command: npx skills add https://github.com/vlad-ryzhkov/AI-QA-workshop-feb19 --skill spec-audit-vlad-ryzhkov

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Spec-related inconsistencies, security gaps, and compliance defects in software specifications are common, leading to wasted effort and downstream defects; this skill identifies contradictions between requirements, data schemas, and examples, and applies standards-based checks to raise early quality.

Core Features & Use Cases

  • Perform conformance reviews against ISTQB, BABOK and OWASP standards to ensure completeness and security considerations are addressed.
  • Detect logical contradictions between requirements, data models, rules, and sample data to prevent ambiguity in implementation.
  • Generate actionable audit notes and remediation guidance suitable for requirements reviews, design discussions, and QA planning.

Quick Start

Provide the project requirements document to the AI and request a full spec audit against ISTQB, BABOK, and OWASP standards.

Frequently Asked Questions about spec-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit software specifications for logical contradictions and security gaps?

To audit software specifications, provide your requirements document to the AI for a full review. It detects logical inconsistencies between requirements and data models, then outputs actionable findings with remediation steps.

What is a spec audit against ISTQB, BABOK, and OWASP standards?

A spec audit against ISTQB, BABOK, and OWASP standards is a conformance review that checks software specifications for completeness, security considerations, and compliance defects to raise early quality.

Can I use this to check data schemas and sample data for compliance defects?

Yes, you can use this to check data schemas and sample data for compliance defects. It detects logical contradictions between requirements, data models, rules, and examples to prevent ambiguity in implementation.

Does this spec audit work for both product briefs and QA sign-offs?

Yes, this spec audit works for both product briefs and QA sign-offs. It applies to requirements documents, data schemas, and examples across software projects to generate actionable audit notes.

What's the best way to generate remediation steps for ambiguous requirements?

The best way to generate remediation steps for ambiguous requirements is to perform a full spec audit on your project document. The review identifies inconsistencies and outputs actionable findings with specific remediation guidance.

Why do I need an OWASP security review for my software requirements?

You need an OWASP security review for your software requirements to identify security gaps early in the lifecycle. Addressing compliance defects during the specification phase prevents wasted effort and downstream defects.