Agent skill · Audited from source
spec-driven-development
skill · jasonkneen/kiroMIT licenceAudited 21 Oct 2026 · source 51e630616a9b
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 51e630616a9b and found no filesystem, network or shell access and no hard-coded secrets. What it does: Systematic three-phase approach to feature development using Requirements, Design, and Tasks phases. Transforms vague feature ideas into well-defined, implementable solutions that reduce ambiguity, improve quality, and…
Cite
Cite this page
ModelsAtlas. “spec-driven-development (jasonkneen/kiro)”. Retrieved 21 Oct 2026. https://modelsatlas.com/skills/jasonkneen/spec-driven-development
2 skills are called “spec-driven-development”. You are viewing jasonkneen/kiro.
- jasonkneen/kiro★ 755✓SAFE
- addyosmani/agent-skills★ 100k✓SAFE
Trust audit
Audit 0.4.1 · source read 21 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 51e630616a9b · 21 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherjasonkneen GitHub userOwner of the repository this skill is read from
- Source folderjasonkneen/kiro/skills/spec-driven-developmentThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict51e630616a9bA new audit runs when the source changes
- Repository statusNot archivedLast push 281 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Systematic three-phase approach to feature development using Requirements, Design, and Tasks phases. Transforms vague feature ideas into well-defined, implementable solutions that reduce ambiguity, improve quality, and…
--- name: spec-driven-development description: Systematic three-phase approach to feature development using Requirements, Design, and Tasks phases. Transforms vague feature ideas into well-defined, implementable solutions that reduce ambiguity, improve quality, and enable effective AI collaboration. license: MIT compatibility: Claude Code, Cursor, VS Code, Windsurf metadata: category: methodology complexity: intermediate author: Kiro Team version: "1.0.0" --- # Spec-Driven Development A comprehensive methodology for systematic software feature development that ensures quality, maintainability, and successful delivery through structured planning. ## When to Use This Skill **Ideal scenarios:** - Complex features with multiple components, integrations, or user interactions - High-stakes projects where rework costs are significant - Team collaboration requiring shared understanding - AI-assisted development where clear structure improves output quality - Knowledge preservation for future maintainers **Less suitable:** - Simple bug fixes with obvious solutions - Experimental prototypes for rapid iteration - Time-critical hotfixes requiring immediate action - Well-established patterns with minimal ambiguity ## The Three-Phase Workflow ### Phase 1: Requirements Gathering **Purpose:** Transform vague feature ideas into clear, testable requirements **Process:** 1. Capture user stories expressing value and purpose 2. Define acceptance criteria using EARS format (Easy Approach to Requirements Syntax) 3. Identify edge cases and constraints 4. Validate completeness and feasibility **EARS Format Patterns:** ``` WHEN [event] THEN [system] SHALL [response] IF [precondition] THEN [system] SHALL [response] WHEN [event] AND [condition] THEN [system] SHALL [response] ``` **Example:** ```markdown **User Story:** As a new user, I want to create an account, so that I can access personalized features. **Acceptance Criteria:** 1. WHEN user provides valid email and password THEN system SHALL create new account 2. WHEN user provides existing email THEN system SHALL display "email already registered" error 3. WHEN user provides password shorter than 8 characters THEN system SHALL display "password too short" error 4. WHEN account creation succeeds THEN system SHALL send confirmation email ``` ### Phase 2: Design Documentation **Purpose:** Create a comprehensive technical plan for implementation **Process:** 1. Research technical approaches and constraints 2. Define system architecture and component interactions 3. Specify data models and interfaces 4. Plan error handling and testing strategies **Design Document Structure:** ```markdown ## Overview [High-level summary of approach] ## Architecture [System components and their relationships] ## Components and Interfaces [Detailed component descriptions] ## Data Models [Data structures and validation rules] ## Error Handling [Error scenarios and response strategies] ## Testing Strategy [Testing approach for different layers] ``` **Decision Documentation:** ```markdown ### Decision: [Title] **Context:** [Situation requiring decision] **Options Considered:** 1. [Option 1] - Pros: [benefits] / Cons: [drawbacks] 2. [Option 2] - Pros: [benefits] / Cons: [drawbacks] **Decision:** [Chosen option] **Rationale:** [Why this was selected] ``` ### Phase 3: Task Planning **Purpose:** Break design into actionable, sequential implementation steps **Process:** 1. Convert design elements into specific coding tasks 2. Sequence tasks to enable incremental progress 3. Define clear objectives and completion criteria 4. Reference requirements for traceability **Task Structure:** ```markdown - [ ] 1. [Epic/Major Component] - [ ] 1.1 [Specific implementation task] - [Implementation details] - [Files/components to create] - _Requirements: [Requirement references]_ ``` **Task Sequencing Strategies:** - **Foundation-First:** Core interfaces before dependent components - **Feature-Slice:** End-to-end vertical slices for early validation - **Risk-First:** Tackle uncertain areas early - **Hybrid:** Combine approaches based on project needs ## Quality Checklists ### Requirements Checklist - [ ] All user roles identified and addressed - [ ] Normal, edge, and error cases covered - [ ] Requirements are testable and measurable - [ ] No conflicting requirements - [ ] EARS format used consistently ### Design Checklist - [ ] All requirements addressed in design - [ ] Component responsibilities well-defined - [ ] Interfaces between components specified - [ ] Error handling covers expected failures - [ ] Security considerations addressed ### Tasks Checklist - [ ] All design components have implementation tasks - [ ] Tasks ordered to respect dependencies - [ ] Each task produces testable code - [ ] Requirements references included - [ ] Scope is appropriate (2-4 hours each) ## Integration with AI Workflows **For Claude Code / AI Assistants:** 1. **Start with context:** Provide project background, constraints, and goals 2. **Work in phases:** Complete requirements before design, design before tasks 3. **Iterate:** Refine outputs through conversation rather than single requests 4. **Validate:** Ask AI to review outputs against checklists 5. **Trace:** Maintain links between requirements, design, and tasks **Example prompt for starting a spec:** ``` I'm working on [project context]. We need to add [feature description]. Context: - Technology: [stack] - Users: [target audience] - Constraints: [key limitations] Please help me develop requirements using the EARS format, starting with user stories and acceptance criteria. ``` ## Common Pitfalls to Avoid 1. **Skipping phases:** Each phase builds on the previous; shortcuts create problems 2. **Vague requirements:** "System should be fast" vs specific, measurable criteria 3. **Implementation details in requirements:** Focus on what, not how 4. **Over-engineering design:** Solve current requirements, not hypothetical
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 51e6306
git clone https://github.com/jasonkneen/kiro git -C kiro checkout 51e630616a9b
The author documents no install command, so this uses the repository directly. Our verdict covers commit 51e630616a9b only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| Windsurf | Mentioned in its text, not tested | Skills for Windsurf · About Windsurf |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
51e630616a9b
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/jasonkneen/spec-driven-development/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/jasonkneen/spec-driven-development/)
<a href="https://modelsatlas.com/skills/jasonkneen/spec-driven-development/"><img src="https://modelsatlas.com/skills/jasonkneen/spec-driven-development/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about spec-driven-development
What does the spec-driven-development skill do?
Is spec-driven-development safe to install?
What can spec-driven-development access on my machine?
Which assistants does spec-driven-development work with?
How current is this page?
Sources
- github.com/jasonkneen/kiro/tree/main/skills/spec-driven-developm — the audited source at commit 51e630616a9b and every finding aboveObserved · 21 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the spec-driven-development skill do?
- Is spec-driven-development safe to install?
- What can spec-driven-development access on my machine?