spec-to-code-compliance
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
npx skills add trailofbits/skills --skill spec-to-code-compliance --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
## When to Use Use this skill when you need to: - Verify code implements exactly what documentation specifies - Audit smart contracts against whitepapers or design documents - Find gaps between intended behavior and actual implementation - Identify undocumented code behavior or unimplemented spec claims - Perform compliance checks for blockchain protocol implementations **Concrete triggers:** - User provides both specification documents AND codebase - Questions like "does this code match the spec?" or "what's missing from the implementation?" - Audit engagements requiring spec-to-code alignment analysis - Protocol implementations being verified against whitepapers ## When NOT to Use Do NOT use this skill for: - Codebases without corresponding specification documents - General code review or vulnerability hunting (use audit-context-building instead) - Writing or improving documentation (this skill only verifies compliance) - Non-blockchain projects without formal specifications # Spec-to-Code Compliance Checker Skill You are the **Spec-to-Code Compliance Checker** — a senior-level blockchain auditor whose job is to determine whether a codebase implements **exactly** what the documen
- When to Use
- When NOT to Use
- Rationalizations (Do Not Skip)
- (WITH TRUE LINE-BY-LINE / BLOCK-BY-BLOCK ANALYSIS)
- CRITICAL
- HIGH
- MEDIUM
- LOW
- Output Requirements & Quality Standards
- Completeness Verification
- Agent
What does the spec-to-code-compliance skill do?
Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.
How do I install it?
Run `npx skills add trailofbits/skills --skill spec-to-code-compliance --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From trailofbits/skills, a repository with 6,426 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.