using-spec-first
Standalone entry governor for spec-first. Use before substantial work in a spec-first repo or when the user asks what to run next; choose one public `spec-*` workflow, standalone skill, terminal command, or Direct Lane. Do not use to reroute active public workflows or bounded workers, or for lightweight facts, current-context explanations, narrow lookups, user-supplied single-document cleanup, or clearly scoped low-risk edits.
- License 许可
- MIT
- 最近更新
- 2026-11-05
- Stars
- ★ 111
- Forks
- 13
01 前言 Front Matter
- name
- using-spec-first
- description
- Standalone entry governor for spec-first. Use before substantial work in a spec-first repo or when the user asks what to run next; choose one public `spec-*` workflow, standalone skill, terminal command, or Direct Lane. Do not use to reroute active public workflows or bounded workers, or for lightweight facts, current-context explanations, narrow lookups, user-supplied single-document cleanup, or clearly scoped low-risk edits.
02 资源文件 30
- 参考文档evals/cases/direct-lane-simple-howto.yaml735 B
- 参考文档evals/cases/failure-priority-single-entry.yaml1.2 KB
- 参考文档evals/cases/r2-low-confidence-one-question.yaml700 B
- 参考文档evals/cases/recommendation-only-format.yaml1.1 KB
- 参考文档evals/cases/route-failure-to-spec-debug.yaml1.2 KB
- 参考文档evals/cases/route-vague-idea-to-spec-brainstorm.yaml1.1 KB
- 参考文档evals/eval.yaml587 B
- 脚本evals/fixtures/scripts/check-r2-asks.sh394 B
- 参考文档payloads/README.md1.1 KB
- 参考文档references/ai-pentest-agents.md6.0 KB
- 参考文档references/ai-pentesting-landscape-2026.md3.4 KB
- 参考文档references/automation-loop-pattern.md5.2 KB
- 参考文档references/awesome-pentest-digest.md5.9 KB
- 参考文档references/burpsuite-mcp-guide.md23.1 KB
- 参考文档references/client-side-lab-playbook.md4.8 KB
- 参考文档references/conditional-routing-boundaries.md4.2 KB
- 参考文档references/kali-mcp-ecosystem.md4.4 KB
- 参考文档references/msf-protocol.md5.9 KB
- 参考文档references/network-attack-defense.md9.9 KB
- 参考文档references/nuclei-guide-2026.md4.0 KB
- 参考文档references/pentest-ai-agents-matrix.md5.0 KB
- 参考文档references/pentest-loop.md6.6 KB
- 参考文档references/public-route-map.md4.8 KB
- 参考文档references/recon-pipeline.md5.7 KB
- 参考文档references/web-attack-cheatsheet.md7.5 KB
- 参考文档templates/findings.md328 B
- 参考文档templates/progress.md242 B
- 参考文档templates/rules.md722 B
- 参考文档templates/scope.md422 B
- 参考文档templates/task_plan.md543 B
03 SKILL.md 正文
Using Spec-First
using-spec-first is a standalone entry governor, not a command-backed workflow. It selects one next entrypoint and yields control; it creates no workflow artifact. It is a semantic map, not a rigid state machine.
Workflow Contract Summary
- 输入: 当前用户意图、已有 workflow 状态、artifact 类型、失败/环境信号与项目级路由规则。
- 输出: 恰好一个 public
spec-*workflow、standalone skill、terminal command 或 Direct Lane 入口;进入后立即把控制权交给该 owner。 - 硬出口: 入口选择不授权 mutation、verification claim、runtime maintenance、handoff、knowledge promotion、commit 或 landing;低置信且会改变 route 时最多询问一个问题。
- 权威: 用户意图与项目 source rules 决定 route;本 skill 只做语义路由,不创建 workflow state 或执行下游工作。
- 消费者: 当前用户、所有 public workflow、standalone skill 与 host runtime entrypoint。
Fast Paths
- Continue an active public workflow or bounded worker; do not restart routing.
- Use the Direct Lane only for current-context explanations, lightweight facts, one-off how-to explanations, command-output explanations, narrow lookups, one user-supplied document, or a single low-risk edit whose target, change, and root cause are already clear.
- Do not use the Direct Lane when the request includes document review/critique, a failure/error/stack trace, environment/setup/runtime concerns, an explicit workflow name, handoff/context reset, knowledge promotion, or an unresolved build goal, target user, success/acceptance criterion, or mutually exclusive implementation direction. If a Direct Lane task expands to multi-file behavior, architecture, governance, runtime, an unknown root cause, or a sensitive surface, stop and route again.
Route Selection
For every request outside the fast paths, and to validate an explicit public route or answer “what next?”, read Public Route Map. Select exactly one entrypoint; do not automatically chain the flow. Prefer readiness, failure, or review routes when they match; otherwise use immediate intent and artifact type. Checkpoint — ask: at low confidence, ask at most one route-changing question, then stop and wait for the answer before routing further.
For active work, announce one localized line equivalent to Entering <entrypoint>: <one concrete reason>, then follow the selected route. If a standalone skill is user-invoked only, recommend it and wait. For recommendation-only requests, return exactly one recommendation and wait:
Recommended entrypoint: <spec-*, standalone skill, or terminal command>
Reason: <one concrete reason>
Next action: <one action the user can take now>
Use the repository's configured user language. Checkpoint — wait: after any recommendation, stop and yield; enter the recommended entrypoint only after the user asks to continue.
Exit Boundaries
Hard exit gates cover mutation, verification claims, source/runtime, handoff/context reset, and knowledge promotion. A route match never authorizes an exit. Never claim verification or completion without traceable evidence, and never fabricate tests, refreshes, evals, or routing evidence. Modify source-of-truth surfaces, never generated host runtime; scripts/tools prepare deterministic facts while LLMs judge semantic adequacy.
Before runtime maintenance, scenario-fingerprint interpretation, worker dispatch, the Codex startup reminder, ordinary-context exclusions, handoff/context reset, knowledge promotion, or any parent multi-repo write, test, autofix, or commit, read Conditional Routing Boundaries and apply the matching section.
04 同仓库更多 Skills
spec-write-tasks
Public workflow entrypoint (spec-write-tasks): compile a settled local spec-plan into an optional derived task pack for spec-work, or validate an existing local task pack before execution. Use for explicit plan-splitting/task-doc requests or high-complexity work suitability; do not use for plan authoring, implementation execution, unresolved scope, small low-risk plans, progress/approval state, remote/generic task lists, or generated runtime mirror edits. Keep the plan as single source of truth; tasks are derived and optional.
spec-write-skill
公开 workflow:创建、修改或迁移项目拥有的 Agent Skill package,或对现有/外部 package 做用户明确要求、零执行的只读验证与 readiness 报告时使用;也用于按已接受的 audit finding 修复 source skill。不要用于一次性回答、解释/总结/翻译、普通代码 review、第三方 Skill 纯安装或导入、跨仓批量修改,或直接修补 generated runtime mirrors。
spec-worktree
Internal helper for caller-owned git worktree isolation. Governed callers are spec-dogfood and spec-work; every caller must provide the forward invocation and intake contract.
spec-work
Execute a settled plan, validated task pack, spec path, or concrete implementation request end-to-end. Use spec-debug for open-ended bugs; stop when target repo, scope, source ownership, or required authorization is unresolved. Not for explicitly requested GitHub PR-review-feedback handling — route those to spec-resolve-pr-feedback.
spec-test-xcode
Build and test iOS apps on simulator using XcodeBuildMCP. Use after making iOS code changes, before creating a PR, or when verifying app behavior and checking for crashes on simulator.
spec-test-browser
Run browser tests on pages affected by current PR or branch. Use after code changes when browser verification is requested before review or merge. Not for diagnosing failures those runs uncover — route defects to spec-debug.