Specforge

Spec-Driven Requirements Engineering mit Governance-Enforcement. Kombiniert Harness-Patterns, EARS-Syntax, Gherkin und NIS2/KRITIS-NFRs. Erzeugt spec.md, plan.md, tasks.md und mehr. Verwende diesen Skill IMMER bei: Requirements schreiben, User Stories, Spezifikation erstellen, Spec-Driven Development, EARS, Gherkin, Requirements Review, Stakeholder-Analyse, KRITIS, NIS2, STRIDE, ADR, Clarify, Analyze, Checklist, Research, Quickstart, Discover, Reverse Engineering. Auch bei: "erstelle eine Spezifikation", "was fehlt in diesem Requirement", "simuliere einen Security Officer", "STRIDE-Analyse", "

33 stars 5 forksSecurity

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add GodModeAI2025/specforge-ai-skill --skill specforge

Manual install

git clone --depth 1 https://github.com/GodModeAI2025/specforge-ai-skill.git /tmp/specforge-ai-skill
mkdir -p ~/.claude/skills
cp -r /tmp/specforge-ai-skill/. ~/.claude/skills/specforge

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# SpecForge — Specs schmieden, nicht schreiben

Spec-Driven RE mit skalierbarer Governance. Specs sind Verträge, keine Vorschläge. Enforcement ist automatisch, nicht optional.

## Session-Isolation (KRITISCH)

SpecForge arbeitet **ausschließlich** mit:
1. **Session-Kontext** — aktuelle Konversation
2. **Eigenrecherche via Web Search** — regulatorische Vorgaben, Standards
3. **Skill-eigene Referenzen** — `references/` (siehe Dispatch-Tabelle)
4. **Projekt-Konfiguration** — `specforge.json` (falls vorhanden)

**VERBOTEN:** Memories, Vorwissen über Nutzer/Projekte, Annahmen ohne Session-Grundlage.

---

## Projekt-Konfiguration: specforge.json

Maschinenlesbare Projektkonfiguration. Wird bei Projekt-Setup (Modus 1) erzeugt. Steuert das Verhalten aller Modi. Dient als deklaratives Manifest — beschreibt vollständig, was das Projekt erwartet, unabhängig von der Implementierung.

Read the full skill on GitHub

Details

Skill name: specforge
Repository: GodModeAI2025/specforge-ai-skill
License: MIT
Repo updated: 9 October 2026

FAQ

What does the Specforge skill do?

How do I install the Specforge skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add GodModeAI2025/specforge-ai-skill --skill specforge. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Specforge popular?

It lives in GodModeAI2025/specforge-ai-skill, which has 33 GitHub stars and 5 forks.

Related skills

R00 Borghei Claude Skills Security

InnerPrawn98/r14-borghei-claude-skills-security

🔒 Security & Compliance skill suite derived from borghei/Claude-Skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

Repo Security Review

Consensys/repo-security-review

Full automated security review pipeline for a code repository. Use this skill whenever the user asks to: review a repo for security issues, run a security audit, find vulnerabilities in a codebase, perform a security assessment, check for OWASP Top 10 and OWASP API Top 10 issues, scan for secrets or exposed credentials, audit dependencies for CVEs, or analyze architecture for security flaws. Trigger even for casual phrasings like "can you check this repo for security issues" or "run security on this". This skill orchestrates a multi-phase pipeline of isolated subagents: secret scanning, tech-s

Security

R00 Glebis Claude Skills Security

lavendertalesun/r20-glebis-claude-skills-security

🔒 Security & Compliance skill suite derived from glebis/claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

R00 Alirezarezvani Claude Skills Security

Axisfrommall/r02-alirezarezvani-claude-skills-security

🔒 Security & Compliance skill suite derived from alirezarezvani/claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

R00 BehiSecc Awesome Claude Skills Security

freewaychameleonnode/r17-behisecc-awesome-claude-skills-security

🔒 Security & Compliance skill suite derived from BehiSecc/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

Bugbountyrules

sanjarbiy/bugbountyrules

Use for ANY bug bounty, penetration test, or web/API/mobile security assessment: recon, testing endpoints, analyzing Burp traffic or any bug-bounty platform's MCP (HackerOne, Intigriti, Bugcrowd, YesWeHack, Immunefi), reviewing APKs, bypassing a WAF, enforcing scope, hunting a specific vuln class, validating findings, writing reports, or when you are stuck on a target and about to give up. Activates automatically for all bug-bounty and pentest sessions. Runs an autonomous, never-surrender predator methodology: refuses to conclude "secure", exhausts each vuln class to depth, proves a real attac

Security

Browse the most popular Claude skills, all security skills, or write your own with the skills generator.