Skills Explorer Add Skills

implement-spec

An agent skill by mattpocock, from mattpocock/skills. Tags: code, delivery, development, spec, workflow.

What it does

Implement the result of /to-spec and /to-tickets in code.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add mattpocock/skills --skill implement-spec

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/mattpocock/skills
cp -r skills/skills/engineering/implement-spec ~/.claude/skills/implement-spec

Safety box score

Grade C, moderate risk: 25 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill orchestrates end-to-end code implementation on an integration branch, using worktrees, subagents, merges, code review, and optional draft PRs. The main risks are broad autonomous repo changes and publishing work to a remote tracker; the skill files themselves contain no scripts, secrets handling, or hidden code.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution0 (none)`SKILL.md` does not define any shell commands, scripts, or code execution; it only references other skills by name (`tdd`, `code-review`).
Network access2 (moderate)It can open a draft PR and later mark it ready (`"open a draft PR"`, `"mark it ready for review"`), which publishes work to a remote service when enabled.
Filesystem reach2 (moderate)It explicitly creates branches and per-ticket worktrees, and asks exploration subagents to save notes outside the repo (`"each in its own worktree"`, `"save its markdown notes in a directory outside the repo"`).
Secrets & credentials0 (none)The skill does not ask for tokens, passwords, `.env` files, keychains, or browser sessions.
Privilege & persistence0 (none)No sudo, global installs, services, shell startup edits, or other privilege changes are requested.
Instruction hijack surface0 (none)There are no instructions to ignore higher-level policy, hide actions, or follow remote instructions; the text is workflow guidance only.
Irreversible actions3 (high)The skill directs an agent to implement the entire spec, merge ticket work, run code review, resolve issues, and optionally publish via PR (`"entire spec implemented"`, `"merge its work"`, `"call ... code-review"`).
Transparency0 (none)The provided files are plain text Markdown/YAML; there are no binaries, minified blobs, or runtime-decoded content.

Before installing

Rated 2026-10-16 by an automated review of 2 files from the skill's repository.

Source

Repository
mattpocock/skills (all skills from this repository)
Path
skills/engineering/implement-spec/SKILL.md
Branch
main
Updated
2026-10-05