Spec Coach

PassAudited by VirusTotal on May 7, 2026.

Overview

Type: OpenClaw Skill Name: spec-coach Version: 1.0.1 The skill is a structured prompt-based workflow designed to guide an AI agent through a specification interviewing process. It contains no executable code, network requests, or attempts to access sensitive system resources; its only functional action is writing a markdown file (SPEC.md) to the local directory as described in its documentation (SKILL.md).

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may create or update a SPEC.md file in the active project directory.

Why it was flagged

This authorizes a local file write. It is central to the skill and gated on user approval, but users should still confirm the destination and whether an existing SPEC.md could be overwritten.

Skill content
After approval, write `SPEC.md` in the current working directory unless the user gives another path.
Recommendation

Before approving final output, confirm the target path and ask the agent to check for an existing file or show a diff if needed.

What this means

Incorrect assumptions or sensitive project details in SPEC.md could influence later implementation work or be visible to others with workspace access.

Why it was flagged

Assumptions and project details can be persisted into the generated SPEC.md and later reused by implementation agents.

Skill content
If still vague after 2 attempts, write an assumption and continue: `[ASSUMPTION: The system should respond within 2 seconds for normal requests.]`
Recommendation

Review the summary and final SPEC.md carefully, remove secrets or unnecessary sensitive details, and correct assumptions before using it for implementation.