Bulletproof Workflow
artemiimillier/bulletproof
Applies a 12-stage verified workflow, from research to deploy, to non-trivial coding tasks, scaled to lightweight, standard or full mode by task size.
Read-only detector that compares SPEC.md with the code and reports invariant, interface and task drift grouped by severity, without changing anything.
$ npx skills add JuliusBrussee/cavekit --skill check -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install JuliusBrussee/cavekit check --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/JuliusBrussee/cavekit.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/check .claude/skills/check && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "check" agent skill from https://github.com/JuliusBrussee/cavekit/tree/main/skills/check into .claude/skills/check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "check", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/JuliusBrussee/cavekit/tree/main/skills/checkType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add JuliusBrussee/cavekit --skill check -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install JuliusBrussee/cavekit check --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/JuliusBrussee/cavekit.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/check .agents/skills/check && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "check" agent skill from https://github.com/JuliusBrussee/cavekit/tree/main/skills/check into .agents/skills/check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "check", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add JuliusBrussee/cavekit --skill check -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install JuliusBrussee/cavekit check --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/JuliusBrussee/cavekit.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/check .cursor/skills/check && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "check" agent skill from https://github.com/JuliusBrussee/cavekit/tree/main/skills/check into .cursor/skills/check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "check", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/JuliusBrussee/cavekit.git --path skills/check--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add JuliusBrussee/cavekit --skill check -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install JuliusBrussee/cavekit check --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/JuliusBrussee/cavekit.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/check .gemini/skills/check && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "check" agent skill from https://github.com/JuliusBrussee/cavekit/tree/main/skills/check into .gemini/skills/check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "check", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install JuliusBrussee/cavekit checkInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add JuliusBrussee/cavekit --skill check -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/JuliusBrussee/cavekit.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/check .github/skills/check && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "check" agent skill from https://github.com/JuliusBrussee/cavekit/tree/main/skills/check into .github/skills/check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "check", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add JuliusBrussee/cavekit --skill check -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install JuliusBrussee/cavekit check --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/JuliusBrussee/cavekit.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/check .opencode/skills/check && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "check" agent skill from https://github.com/JuliusBrussee/cavekit/tree/main/skills/check into .opencode/skills/check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "check", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
checkRead-only detector that compares SPEC.md with the code and reports invariant, interface and task drift grouped by severity, without changing anything.
check is a read-only drift detector for spec-driven development. It reads SPEC.md, compares it with the current code and reports violations grouped by severity, writing nothing and never invoking other skills. If there is no SPEC.md it says so and stops. It is meant to run after each build and before shipping, since drift caught at that point is only a diff.
Arguments choose the scope: the invariants section by default, interfaces, tasks, or all three. For each invariant it turns the rule into a checkable claim about the code, reads the relevant files and marks it HOLD, VIOLATE or UNVERIFIABLE with file and line evidence. Interface items are marked MATCH, DRIFT, MISSING or EXTRA, and tasks are checked for claimed work, with completed rows that lack evidence flagged STALE. The report ends with one-line remedy hints pointing to the spec or build skills, with no scores or grades.
2 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 7421e87. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Spec Drift Check loads about 666 tokens when it runs. Until then it costs about 108 tokens; SKILL.md has 263 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from JuliusBrussee/cavekit at commit 7421e87, republished under its MIT licence (© JuliusBrussee). 263 words, ~666 tokens.
.claude/skills/check/SKILL.md (or your agent's skills folder).Pure diagnostic. Reports violations. Writes nothing. User decides remedy.
Spec drifting silently from code is the #1 SDD failure mode. check is the
detector. Run it after each /build and before each ship — drift caught here is
a diff; drift caught in prod is a §B.
SPEC.md. If missing → "no spec, nothing to check." Stop.§V → check invariants only (default)§I → check interfaces§T → audit task status vs code--all → all threeFor each V<n>:
For each I item:
For each T<n>:
x: verify claimed work present.~: note as in-progress..: note as pending.x rows with no evidence as STALE.Caveman. Grouped by severity.
## §V drift
V2 VIOLATE: auth/mw.go:47 uses `<` not `≤`. see §B.1.
V5 UNVERIFIABLE: no test covers ∀ req path.
## §I drift
I.api DRIFT: POST /x returns `{result}` not `{id}`. route.go:112.
I.cmd MISSING: `foo bar` absent from cli/*.go.
## §T drift
T3 STALE: status `x`, no middleware file exists.
## summary
2 violate. 1 missing. 1 stale. 1 unverifiable.
next: spec skill with `bug:` or fix code at cited lines.End report with one-line hint per class:
bug: <V.n> or fix code.§T.n if task exists; else spec skill amend §T.amend §T to uncheck.amend §I to document, or delete code.Never invoke fixes. Report only.
© JuliusBrussee, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in skills/check of JuliusBrussee/cavekit.
Open the folder on GitHubat commit 7421e87
Spec Drift Check next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Spec Drift Check this skillJuliusBrussee/cavekit | 1.1k | — | ~666 | Automated safety check: Pass | MIT | |
| Bulletproof Workflowartemiimillier/bulletproof | 153 | — | ~3.5k | Automated safety check: Pass | MIT | |
| Spec-Driven Feature Developmenttech-leads-club/agent-skills | 7k | — | ~4.3k | Automated safety check: Pass | CC-BY-4.0 | |
| Build a New-Project SliceKhazP/vibe-coding-prompt-template | 3.1k | — | ~353 | Automated safety check: Notes | MIT | |
| TLC Implementtech-leads-club/agent-skills | 7k | — | ~4.3k | Automated safety check: Pass | CC-BY-4.0 | |
| agtx Execute Phasefynnfluegge/agtx | 1.7k | — | ~439 | Automated safety check: Pass | Apache-2.0 |
artemiimillier/bulletproof
Applies a 12-stage verified workflow, from research to deploy, to non-trivial coding tasks, scaled to lightweight, standard or full mode by task size.
tech-leads-club/agent-skills
Plans and implements a feature through four phases, specify, design, tasks and execute, with testable requirements, atomic commits and a separate verifier checking the work.
KhazP/vibe-coding-prompt-template
Builds one working slice of a new project from the brief, runs the affected checks and the user journey, and reports what was and was not verified.
tech-leads-club/agent-skills
Turns an already-planned ticket or spec into a checklist, builds it, and has a fresh verifier agent prove each check independently.
fynnfluegge/agtx
Carries out an approved plan for an agtx-managed task: implements the changes, runs tests, commits, writes a summary to .agtx/execute.md and then stops.
LichAmnesia/lich-skills
Runs a gated Spec, Plan, Build, Test, Review, Ship workflow so non-trivial changes are specified, verified and reviewed before they ship, with a named artifact per phase.
JuliusBrussee/cavekit
After a bug is found, traces its root cause and feeds a new testable invariant back into the project spec so the bug class can't recur.
JuliusBrussee/cavekit
Compresses SPEC.md writes and spec-referencing prose into terse, symbol-heavy fragments that drop articles, filler and hedging while keeping facts intact.
JuliusBrussee/cavekit
Builds a skeptical reviewer grounded in the codebase and research notes to try to refute a spec before any code is written, citing file:line evidence and ending in a go or no-go gate.
JuliusBrussee/cavekit
Scans the code a spec touches for its shallowest module, then proposes a refactor that hides more behind a smaller interface without changing behavior.
JuliusBrussee/cavekit
Interrogates a vague idea one question at a time, recommending an answer each round and recording results as goals and constraints before a spec is written.
JuliusBrussee/cavekit
Gather external knowledge the spec needs and distill it into §R — the durable research log — so build grounds in facts instead of hallucinating library behavior.
Categories
Read-only detector that compares SPEC.md with the code and reports invariant, interface and task drift grouped by severity, without changing anything. check is a read-only drift detector for spec-driven development.md, compares it with the current code and reports violations grouped by severity, writing nothing and never invoking other skills.
Spec Drift Check fits situations like: checking whether the code still matches SPEC.md after a build; auditing interface definitions in the spec against the implementation; finding spec tasks marked done that have no evidence in the code; running a drift report before shipping.
Run `npx skills add JuliusBrussee/cavekit --skill check -a claude-code`. Or copy the skill folder (skills/check in JuliusBrussee/cavekit) into .claude/skills/check in your project. Claude Code loads it when a task matches its description.
Run `npx skills add JuliusBrussee/cavekit --skill check -a codex`. Or copy the skill folder (skills/check in JuliusBrussee/cavekit) into .agents/skills/check in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add JuliusBrussee/cavekit --skill check -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/check, .gemini/skills/check, .github/skills/check and .opencode/skills/check in your project.
SKILL.md names no scripts, command-line tools or credentials: Spec Drift Check is instructions for the agent only. Our summary lists: A SPEC.md file in the repository.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Spec Drift Check is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 666 tokens (SKILL.md is roughly 2.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Spec Drift Check: Bulletproof Workflow (artemiimillier/bulletproof, 153 stars), Spec-Driven Feature Development (tech-leads-club/agent-skills, 7k stars), Build a New-Project Slice (KhazP/vibe-coding-prompt-template, 3.1k stars) and TLC Implement (tech-leads-club/agent-skills, 7k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
JuliusBrussee (a GitHub user) maintains it in JuliusBrussee/cavekit, which has 1,149 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on August 14, 2026.
Source: JuliusBrussee/cavekit on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.