prospec-verify

prospec-verify is a skill for Claude Code, Codex from benwu95/prospec. It costs 70 tokens per session (9,673 once invoked), scanned A, original, MIT.

A review skill that checks an implementation against its tasks, written requirements, project rules, supporting knowledge, tests, and—when relevant—its design.

In plain words
What is it for?
Use it to verify or audit completed work and receive a quality grade from S to D with a deployment recommendation. It requires the prospec command-line tool.
Why use it?
It gives a structured quality check and identifies whether the implementation is complete and consistent before deployment.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/benwu95/prospec/prospec-verify
Any agent
npx skills add benwu95/prospec --skill prospec-verify
Clone the repo
git clone --depth 1 https://github.com/benwu95/prospec

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for prospec-verify

README.md
[![agentmods](https://agentmods.dev/badge/skills/benwu95/prospec/prospec-verify.svg)](https://agentmods.dev/skills/benwu95/prospec/prospec-verify)
Your own site
<a href="https://agentmods.dev/skills/benwu95/prospec/prospec-verify"><img src="https://agentmods.dev/badge/skills/benwu95/prospec/prospec-verify.svg" alt="Measured on agentmods" height="20"></a>
Per session 70 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 9,673 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00070 $0.09673
Opus 5 $0.00035 $0.04836
Sonnet 5 $0.00014 $0.01935
Haiku 4.5 $0.00007 $0.00967

Measured today against content hash a64db058e8e4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

prospec-verify scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/prospec-verify/SKILL.md · 465 lines

How it starts

The opening of the file, as written. The whole thing — 465 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Prospec Verify Skill

Activation

When triggered, briefly describe:

  • That you'll perform a comprehensive audit of the implementation
  • All 5+1 verification dimensions will be checked (task completion, spec compliance, Constitution full audit, Knowledge ↔ implementation consistency, tests, and design consistency if UI scope applies)
  • That the dimensions are adjudicated by two different authorities: 1/5, 4/5 and 5/5 by the deterministic prospec check engine (you interpret and narrate its verdicts, you do not decide them), 2/5 and 6 by an independent fresh-context reviewer, 3/5 by both (mechanical rule inventory, judged violations)
  • A quality grade (S/A/B/C/D) with deployment recommendation will be provided

CLI Prerequisite (required)

The prospec CLI is a required file for this skill — its deterministic steps call prospec commands. Probe BEFORE any other step; there is no manual fallback.

  1. Run prospec --version (Bash).
  2. Command not found / not executable → STOP. Ask the user to install the prospec standalone executable — the one-click installer script from the project README (macOS/Linux install.sh, Windows install.ps1) or a release binary from GitHub Releases; prospec is NOT published to npm. Then re-run this skill.
  3. Version older than 2.1.0 → STOP. Report the installed vs required version and ask the user to upgrade, then re-run this skill.

Hand-executing a CLI-owned mutation is NEVER the fallback — that re-introduces the nondeterministic serialization this contract exists to remove.

Startup Loading

  1. [STABLE] Read prospec/CONSTITUTION.md — for full audit
  2. [DYNAMIC] Read .prospec/changes/[name]/tasks.md — task completion status
  3. [DYNAMIC] Read .prospec/changes/[name]/plan.md — design intent (skip for scale: quick/backfill — no plan by contract)
  4. [DYNAMIC] Read .prospec/changes/[name]/delta-spec.md — file specifications (skip for scale: quick — no delta-spec by contract; 2/5 is not-applicable)
  5. [DYNAMIC] Read .prospec/changes/[name]/proposal.md — acceptance scenarios
  6. [DYNAMIC] Read .prospec/changes/[name]/metadata.yaml — current status (updated on pass; see Status Update)
  7. [DYNAMIC] Load the Feature Spec requirements this change touches — for each REQ id the delta-spec names, run prospec spec show <feature> --req <ids> (Bash), the **Feature:** field giving the feature. Quote them for the 2/5 comparison; never read the whole prospec/specs/features/ directory or a whole spec file — 2/5 compares this change against the REQs it touches, and one spec can run to tens of thousands of tokens of unrelated capability record. Add --story <US-N> when a REQ's surrounding story matters. An ADDED REQ is expected to be missing here: requirements graduate into the trust zone at prospec-archive Phase 3.5, so the command reports every ADDED id as unmatched and exits non-zero — that is the designed state, never a 2/5 finding. Read the MODIFIED/REMOVED ids from the spec (they exist), and take each ADDED REQ's text from the delta-spec entry itself; --story <US-N> is what shows you the section an ADDED REQ will land in. (skip for scale: quick — no delta-spec REQs to compare)
  8. [DYNAMIC] Read prospec/specs/product.md — understand product-level overview
  9. [DYNAMIC] Run prospec check --json (Bash), then read the prospec-report.json file — the deterministic verdicts for Verification 1/5, 4/5 and 5/5, plus the Constitution rule inventory 3/5 audits against (the same engine the CI gate runs). --json writes the file; stdout is a human-readable summary, not JSON — take structured facts from the file. Its shape (checks keyed by id under structural.checks[], problems under structural.findings[], freshness under structural.knowledge_health.modules[], rules under structural.constitution.rules[]) is documented in references/drift-report-format.md — consult it instead of reverse-engineering the JSON. The CLI is a required file (see CLI Prerequisite — a missing engine is a STOP at the probe, never a gradable state); never adjudicate a machine dimension yourself

Read the full file on GitHub · 465 lines

Files

What ships with it

5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +8 lines a64db058e8e4
  2. 4d ago First seen · 457 lines · 70 tokens per session scan A 33712f38105f

Subscribe to this mod's changes

prospec-verify is a skill published in the GitHub repository benwu95/prospec (5 stars, last pushed today), licensed MIT. It adds 70 tokens to every session and 9,673 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.