Zum Hauptinhalt springen
Dieser Inhalt ist noch nicht in Ihrer Sprache verfügbar und wird auf Englisch angezeigt.

Spec To Code Compliance Checker

Skill Aktiv

Verifies code implements exactly what documentation specifies for blockchain audits. Use when comparing code against whitepapers, finding gaps between specs and implementation, or performing compliance checks for protocol implementations.

Zweck

To ensure strict adherence between blockchain protocol documentation and its implementation, identifying gaps, inconsistencies, and security risks.

Funktionen

  • Deterministic spec-to-code analysis
  • Intermediate Representation (IR) generation for spec and code
  • Alignment and divergence analysis
  • Severity classification of compliance issues
  • Audit-grade reporting

Anwendungsfälle

  • Verifying smart contracts against whitepapers.
  • Finding gaps between intended protocol behavior and actual implementation.
  • Performing compliance checks for blockchain protocol implementations.
  • Auditing undocumented code behavior or unimplemented spec claims.

Nicht-Ziele

  • General code review or vulnerability hunting outside of spec compliance.
  • Writing or improving documentation.
  • Analyzing non-blockchain projects without formal specifications.
  • Inferring unspecified behavior or guessing intent.

Workflow

  1. Discover and normalize all documentation into a spec corpus.
  2. Extract spec intent into an Intermediate Representation (Spec-IR).
  3. Perform detailed, line-by-line analysis of the codebase into Code-IR.
  4. Align Spec-IR and Code-IR to generate Alignment-IR.
  5. Classify all divergences by severity (critical, high, medium, low).
  6. Produce a final audit-grade report including findings and recommendations.

Praktiken

  • Audit rigor
  • Evidence-based analysis
  • Determinism
  • Traceability
  • Compliance checking

Voraussetzungen

  • Specification documents (e.g., whitepaper, protocol docs)
  • Codebase to be analyzed

Trust

  • warning:Issues Attention13 issues opened, 4 closed in last 90 days, indicating slow response to reported issues.

Installation

Zuerst Marketplace hinzufügen

/plugin marketplace add trailofbits/skills
/plugin install spec-to-code-compliance@trailofbits

Qualitätspunktzahl

75 /100
Analysiert about 24 hours ago

Vertrauenssignale

Letzter Commit3 days ago
Sterne5.2k
LizenzCC-BY-SA-4.0
Status
Quellcode ansehen

Ähnliche Erweiterungen

Investigate Capa Root Cause

100

Investigate root causes and manage CAPAs (Corrective and Preventive Actions) for compliance deviations. Covers investigation method selection (5-Why, fishbone, fault tree), structured root cause analysis, corrective vs preventive action design, effectiveness verification, and trend analysis. Use when an audit finding requires a CAPA, when a deviation or incident occurs in a validated system, when a regulatory observation needs a formal response, when a data integrity anomaly requires investigation, or when recurring issues suggest a systemic root cause.

Skill
pjt222

Soul Guardian

100

Drift detection + baseline integrity guard for agent workspace files with automatic alerting support

Skill
prompt-security

Audit Dependency Versions

100

Audit project dependencies for version staleness, security vulnerabilities, and compatibility issues. Covers lock file analysis, upgrade path planning, and breaking change assessment. Use before a release to ensure dependencies are current and secure, during periodic maintenance reviews, after receiving a security advisory, when upgrading to a new language version, before submitting to CRAN or npm, or when inheriting a project to assess its dependency health.

Skill
pjt222

Codex Diff Develop

100

Revisa el diff de la rama actual frente a develop en proyectos Drupal 11 siguiendo la metodología Codex (lógica de negocio, edge cases de hooks/queries, seguridad, performance, completitud). Genera un informe .md en la carpeta del IDE detectado (.antigravity/, .cursor/, .vscode/ o docs/) con hallazgos por severidad y soluciones accionables. Usar cuando el usuario pida "Revisión diff develop", "revisión diff develop", "diff develop", "revisar diff", "codex diff" o expresiones similares con intención de auditar cambios contra develop. Triggers: diff develop, codex diff, revisión diff, lint diff develop, auditar diff.

Skill
j4rk0r

Qms Audit Expert

100

ISO 13485 internal audit expertise for medical device QMS. Covers audit planning, execution, nonconformity classification, and CAPA verification. Use for internal audit planning, audit execution, finding classification, external audit preparation, or audit program management.

Skill
alirezarezvani

Prepare Inspection Readiness

100

Prepare an organisation for regulatory inspection by assessing readiness against agency-specific focus areas (FDA, EMA, MHRA). Covers warning letter and 483 theme analysis, mock inspection protocols, document bundle preparation, inspection logistics, and response template creation. Use when a regulatory inspection has been announced or is anticipated, when a periodic self-assessment is due, when new systems have been implemented since the last inspection, or after a significant audit finding that may attract regulatory attention.

Skill
pjt222