supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
feature-spec-reviewing
Reviews feature specifications for completeness, testability, and implementation readiness. Validates acceptance criteria, edge cases, and technical constraints. Use when reviewing feature specs before implementation or during sprint planning.
Full skill instructions
Systematically review feature specifications to ensure they are complete, testable, and ready for implementation. Catches gaps in edge cases and error handling before engineering work begins.
feature-spec-writing instead)prd-reviewing instead)technical-spec-reviewing instead)Read the entire feature spec and assess structure:
Initial Assessment:
- [ ] Feature definition is clear one-sentence
- [ ] Primary user story present
- [ ] Acceptance criteria exist
- [ ] Error states documented
- [ ] Definition of Done checklist exists
Red Flags:
Evaluate the feature definition:
Feature Definition Checklist:
1. Is it a single sentence?
2. Does it follow [Verb] [what] for [whom] to [outcome]?
3. Is the scope clear and bounded?
4. Is it too broad (actually multiple features)?
5. Does it align with parent PRD (if applicable)?
Severity Guide:
| Issue | Severity |
|---|---|
| No feature definition | BLOCKER |
| Multi-feature bundling | BLOCKER |
| Vague definition | CRITICAL |
| Misaligned with PRD | MAJOR |
| Minor clarity issues | MINOR |
Evaluate user story against standard format:
User Story Checklist:
- [ ] Follows "As a... I want... So that..." format
- [ ] User type is specific (not just "user")
- [ ] Goal is concrete and achievable
- [ ] Benefit explains real value
- [ ] Story is right-sized (not an epic)
- [ ] Variants cover key user paths (if applicable)
Common Issues:
| Issue | Example | Severity |
|---|---|---|
| Missing format | "Add quick view feature" | CRITICAL |
| Generic user | "As a user" instead of "As a shopper" | MAJOR |
| No benefit | Missing "so that" clause | MAJOR |
| Epic-sized | Entire workflow in one story | CRITICAL |
Evaluate acceptance criteria for completeness and testability:
Criteria Coverage Checklist:
- [ ] Happy path (primary success scenario)
- [ ] Input validation (valid and invalid)
- [ ] Edge cases (boundaries, empty, max)
- [ ] Error handling (network, server, timeout)
- [ ] Performance expectations
- [ ] Security requirements (if applicable)
- [ ] Accessibility (if UI feature)
Testability Test: For each criterion, ask: "Can QA write a test case from this?"
❌ Untestable: "Quick view should be fast"
✅ Testable: "Quick view modal appears within 300ms of hover"
❌ Untestable: "Handle errors gracefully"
✅ Testable: "On network failure, show 'Connection lost' and retry button"
❌ Untestable: "Work on mobile"
✅ Testable: "On screens < 768px, bottom sheet replaces modal"
Verify edge cases are comprehensive:
Edge Case Categories:
□ Empty state (no data, first use)
□ Minimum values (0, 1, empty string)
□ Maximum values (limits, overflow)
□ Null/undefined handling
□ Concurrent access (race conditions)
□ Timeout scenarios
□ Partial failure (some items succeed, some fail)
□ Network conditions (slow, offline, reconnect)
Coverage Scoring:
| Coverage | Rating | Action |
|---|---|---|
| 7-8 categories | Strong | Approve |
| 5-6 categories | Adequate | Minor improvements |
| 3-4 categories | Weak | Critical - add cases |
| < 3 categories | Missing | Blocker - major gaps |
Evaluate error states matrix:
Error States Checklist:
- [ ] All API calls have failure handling
- [ ] User-facing messages are helpful
- [ ] System actions are appropriate
- [ ] Recovery paths are clear
- [ ] Logging/alerting defined
Error Categories to Verify:
| Category | Example Errors |
|---|---|
| Input | Invalid format, missing required, too long |
| Network | Offline, timeout, partial response |
| Server | 500, 503, rate limit |
| Business Logic | Conflict, not found, unauthorized |
| External | Third-party API down, invalid response |
Assess implementation readiness:
Feasibility Assessment:
- [ ] Dependencies identified and available
- [ ] Non-functional requirements realistic
- [ ] Data requirements clear
- [ ] No obvious technical blockers
- [ ] Performance targets achievable
If feature has parent PRD:
Alignment Check:
- [ ] Feature implements specific PRD user story
- [ ] Acceptance criteria align with PRD scope
- [ ] Out-of-scope items match PRD exclusions
- [ ] Success metrics support PRD goals
Compile findings using the template below.
| Level | Definition | Action |
|---|---|---|
| BLOCKER | Cannot implement | Must fix before approval |
| CRITICAL | Will cause major issues | Should fix before sprint |
| MAJOR | Will cause rework | Should fix soon |
| MINOR | Nice to have | Can address during implementation |
BLOCKER:
CRITICAL:
MAJOR:
MINOR:
# Feature Spec Review: [Feature Name]
**Reviewer:** [Name]
**Review Date:** [Date]
**Spec Version:** [Version]
**Spec Author:** [Name]
---
## Summary
**Status:** [APPROVE / APPROVE WITH CHANGES / NEEDS REVISION / MAJOR REVISION]
**Implementation Readiness:** [Ready / Ready After Fixes / Not Ready]
**Assessment:**
[2-3 sentences on overall quality and readiness]
---
## Findings by Severity
### Blockers
- [ ] [Finding with location and recommendation]
### Critical
- [ ] [Finding with location and recommendation]
### Major
- [ ] [Finding with location and recommendation]
### Minor
- [ ] [Finding with location and recommendation]
---
## Section Ratings
| Section | Rating | Notes |
|---------|--------|-------|
| Feature Definition | [Strong/Adequate/Weak/Missing] | |
| User Story | [Strong/Adequate/Weak/Missing] | |
| Acceptance Criteria | [Strong/Adequate/Weak/Missing] | |
| Edge Cases | [Strong/Adequate/Weak/Missing] | |
| Error States | [Strong/Adequate/Weak/Missing] | |
| Technical Constraints | [Strong/Adequate/Weak/Missing] | |
---
## Edge Case Coverage
□ Empty state - [Covered/Missing]
□ Minimum values - [Covered/Missing]
□ Maximum values - [Covered/Missing]
□ Null handling - [Covered/Missing]
□ Concurrent access - [Covered/Missing]
□ Timeout scenarios - [Covered/Missing]
□ Partial failure - [Covered/Missing]
□ Network conditions - [Covered/Missing]
**Coverage Score:** [X/8]
---
## Testability Assessment
**Can QA write tests?** [Yes / Partially / No]
**Problematic Criteria:**
- [Criterion that's not testable and why]
---
## Strengths
- [What the spec does well]
- [What the spec does well]
## Risks
1. [Risk and suggested mitigation]
2. [Risk and suggested mitigation]
---
## Questions for Author
1. [Clarifying question]
2. [Clarifying question]
---
## Recommendation
[Detailed recommendation with specific next steps]
Status: APPROVE WITH CHANGES
Assessment: Well-structured feature spec with clear definition and comprehensive acceptance criteria. Minor gaps in timeout handling edge cases.
Findings:
Edge Case Coverage: 7/8 (Missing: Partial failure)
Status: NEEDS REVISION
Assessment: Good user story but acceptance criteria lack edge case coverage. Error states incomplete. Should add missing scenarios before sprint planning.
Findings:
Edge Case Coverage: 2/8
Status: MAJOR REVISION REQUIRED
Assessment: Feature definition describes multiple features bundled together. Recommend splitting into separate specs.
Findings:
Recommendation: Split into 4 separate feature specs.
Reviews Output From:
feature-spec-writing - Validate completed feature specsLeads To:
technical-spec-writing - After spec approvedsparc-planning - After spec approvedFor comprehensive specification guidance that coordinates this and other spec skills, use the specification-architect agent.
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content