claude

spec-to-code-compliance

Holds code to what its documents promise: extracts each requirement from READMEs, design notes, OpenAPI, argument_specs, Terraform variable descriptions, CI input text and help output, checks every one with a dedicated agent, has two more agents try to knock down each divergence, and writes a per-requirement verdict report with severity to $TMPDIR. Read-only; never runs the code.

0 on GitHubby Aleksandr Letunovv1.0.0MITupdated todaysecurity
/

Plugin spec-to-code-compliance from marketplace devops in flyoverhead/devops-plugins. Commands read from the repo's manifest — today.

What it installs

Skills (1)

  • spec-to-code-compliance

    Measures code against the promises its own documents make — README guarantees, design notes, OpenAPI, doc comments, role argument_specs, Terraform variable descriptions, CI input text, --help — with one checker agent per requirement and two refuter agents per divergence, then reports verdict, severi

Subagents (2)

  • divergence-refuter

    Second opinion on one gap that spec-to-code-compliance:spec-to-code-compliance reported between a document and the code. Assigned either the code side, where it hunts for enforcement the checker overlooked, or the document side, where it rereads the text for scope and wording that undo the claim; re

  • spec-compliance-checker

    Worker that owns exactly one quoted requirement handed out by spec-to-code-compliance:spec-to-code-compliance. Traces it into the code, opens every helper, caller and callee on the way, walks error branches and alternate roles as well as the happy path, keeps a search log, saves its notes to the sin

View source on GitHub

More from flyoverhead/devops-plugins

All 22 plugins →

golang

claude

Go toolkit: version-aware idioms, concurrency fixes proven with the race detector, performance work backed by benchmarks and profiles, read-only code review, tests that match the repository, a GitHub-ready project scaffold and gopls LSP.

5 skills · 3 agents · hooks · LSP

0

Did a PR, commit or commit range break something that used to work? Pins the before and after states, hunts candidate regressions in the diff, then has three separate fresh agents reproduce, replay and adjudicate each one on live S0 and S1 builds. Sealed evidence, an attempt registry and an HTML/Markdown/JSON report stay in a campaign directory outside the repo; GitHub is only read.

7 skills

0

ansible

claude

Ansible toolkit: role creator in the classic upstream layout (install/configure/service, meta/argument_specs.yml, sentence-case names, true/false, FQCN, ansible-lint production profile), role checker and molecule scaffolder, plus a guard on real ansible-playbook runs

3 skills · 1 agent · hooks

0

One reported bug, reproduced on the unchanged build, re-run blind by a second agent, fixed at its invariant with a failing-first regression test and a single signed-off local commit, then proven on baseline, patched and reverted worktrees by yet another agent. Records, receipts and hash manifests stay in $TMPDIR; nothing is pushed.

5 skills

0

terraform

claude

Terraform toolkit: module-creator for YAML-driven modules with inheritance and validation layers (OpenStack, VMware, AWS, Azure, GCP, Proxmox), provider-creator for Plugin Framework providers with a GitHub Actions release, plus terraform-ls LSP and safety hooks

2 skills · 1 agent · hooks · LSP

0

fp-check

claude

Settles whether suspected security findings tied to a code location are real: restates each claim, traces source to sink, proves or refutes attacker control and impact, writes PoCs outside the repo without running them, and passes six gates before a TRUE or FALSE POSITIVE verdict. Takes scanner output, review findings or a pasted GitHub code-scanning alert.

1 skill · 3 agents

0

Similar plugins

context7

claudecodex

Up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your coding agent's context.

1 MCP server

upstash/context7 64,709

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

qmd

claude

Search and retrieve documents from local markdown files.

2 skills

tobi/qmd 31,085

prowler

claude

Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.

1 skill · 1 MCP server

prowler-cloud/prowler 15,234

MiniMax AI skills library for frontend, fullstack, Android, iOS, shader, GIF sticker, document, presentation, spreadsheet, and multimodal media workflows

18 skills

MiniMax-AI/skills 13,828

kami

claudecodex

Typeset professional documents and landing pages with the Kami design system.

1 skill

tw93/Kami 12,530

Maintain spec-to-code-compliance?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins22 plugins