Does it provide actionable remediation steps?

Yes, every divergence finding includes evidence links, severity justification, exploitability reasoning, and recommended remediation plans to fix the compliance gap.

Can this skill analyze PDF whitepapers?

Yes, the skill is designed to normalize various input formats including PDF, Markdown, DOCX, and meeting transcripts into a canonical specification corpus for deep analysis.

Is this skill limited to blockchain projects?

While it is optimized for blockchain audits and smart contract logic, it can be applied to any software project that requires strict adherence to formal technical specifications.

How does it handle code that isn't mentioned in the documentation?

The skill follows strict anti-hallucination rules and will explicitly flag any code behavior not found in the specification as an 'Undocumented Code Path' for auditor review.

Spec-to-Code Compliance Checker

Name: Spec-to-Code Compliance Checker
Author: fjor1025

byfjor1025

0•

Security & Testing

Audits blockchain codebases against technical specifications and whitepapers to identify implementation gaps and logic divergences.

This skill transforms Claude into a senior-level blockchain auditor focused on rigorous spec-to-code alignment. It systematically extracts intended behaviors from documentation—such as whitepapers, design notes, and protocol specs—and maps them to granular, line-by-line code analysis. By generating Intermediate Representations (IR) for both intent and implementation, it identifies missing invariants, math inconsistencies, and undocumented code paths with audit-grade precision. The skill ensures all findings are deterministic and traceable, providing evidence-based reports that categorize risks from low to critical severity.

Key Features

010 GitHub stars

02Formal alignment matrix comparing intended vs. actual implementation

03Divergence classification with severity ratings and exploit scenarios

04Line-by-line semantic code analysis and behavior mapping

05Traceable evidence citations for all findings with confidence scores

06Automated Spec-IR extraction from whitepapers and technical documentation

Use Cases

01Verifying a DeFi protocol's smart contracts against its original whitepaper logic

02Performing pre-audit compliance checks to find unimplemented specification claims

03Identifying undocumented code behaviors or hidden features in protocol implementations

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework spec-to-code-compliance

For use in Claude.ai and ChatGPT

Download Skill