tlc-spec-driven
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust 'Knowledge Verification Chain' designed to prevent hallucinations and technical inaccuracies.
- Evidence: The framework established in
SKILL.mdandreferences/design.mdenforces a strict hierarchy for information gathering (Codebase, Project Docs, Context7 MCP, Web Search) and explicitly instructs the agent to flag uncertainty rather than fabricate information. - [COMMAND_EXECUTION]: The skill utilizes standard command-line utilities for codebase analysis and version control management.
- Evidence: Documentation in
references/code-analysis.mdandreferences/implement.mdprovides patterns for usingripgrep(rg),ast-grep(sg), andgitto map existing repositories and perform atomic commits. - [EXTERNAL_DOWNLOADS]: The documentation references an installation script provided by the author's official organization.
- Evidence:
README.mdincludes the commandnpx @tech-leads-club/agent-skills install -s tlc-spec-drivento set up the skill environment. - [SAFE]: The skill incorporates persistent memory features to maintain state across sessions without using suspicious persistence mechanisms.
- Evidence: State management is handled through a documented
.specs/project/STATE.mdfile within the user's project directory, as described inreferences/state-management.md, rather than system-level persistence like cron jobs or shell profile modifications.
Audit Metadata