What is included in the final compliance report?

The output is a structured audit report featuring an alignment matrix, divergence findings categorized by severity (Critical to Low), math inconsistency analysis, and recommended remediations.

Can this skill analyze documentation in PDF format?

Yes, the skill is designed to normalize various input formats including PDFs, Markdown, whitepapers, and technical design documents into a unified specification corpus for analysis.

Does it work for non-blockchain projects?

While specifically optimized for blockchain audits and protocol implementations, it can be applied to any software project where a strict alignment between formal documentation and code is required.

How does this skill prevent AI hallucinations?

The skill enforces strict anti-hallucination rules, requiring exact evidence citations for every claim. If a behavior is not explicitly in the spec, it is marked as 'undocumented' rather than inferred.

Spec-to-Code Compliance Checker

Name: Spec-to-Code Compliance Checker
Author: trailofbits

bytrailofbits

•

937

•

Security & Testing

Verifies that blockchain codebases align perfectly with their whitepapers and technical specifications through rigorous semantic mapping.

This skill transforms Claude into a senior blockchain auditor capable of performing exhaustive compliance checks between documentation and implementation. It follows a structured, multi-phase workflow to extract intended behaviors from specifications—such as whitepapers, READMEs, and design notes—and compares them against line-by-line code analysis. By generating Intermediate Representations (IR) for both spec and code, it identifies critical misalignments, undocumented logic, and missing security invariants, providing a deterministic audit-grade report with evidence-backed findings and exploitability reasoning.

Key Features

01Detection of undocumented code paths and unimplemented specification claims

02Deterministic extraction of protocol invariants, formulas, and state transitions

03937 GitHub stars

04Multi-phase semantic alignment between technical specifications and source code

05Traceable evidence mapping with confidence scores and exact line citations

06Severity-based divergence classification with exploitability reasoning

Use Cases

01Auditing smart contract implementations against original whitepapers or design documents

02Performing regulatory or protocol compliance checks for complex blockchain systems

03Identifying logic gaps and missing security checks during protocol verification

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add trailofbits/skills spec-to-code-compliance

For use in Claude.ai and ChatGPT

Download Skill