← Skills

spec-to-code-compliance

Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions. Use when comparing an implementation against a whitepaper, protocol spec, or design document.

Agent Skill from trailofbits/skills

Copilot Studio

Passes documented load rules

No documented load rule failed.

Microsoft 365 Copilot Preview, Frontier tenants only

Needs changes

An agent can have at most 8 skills. Custom skills aren't available in tenants that use Microsoft Purview Information Barriers.

Agent Skills spec notes
Compatible isn't the same as safe. These verdicts only say whether a skill's files follow Microsoft's documented load rules. The checker reads files and never runs them, and it doesn't review what a skill or its scripts actually do. Read a skill's instructions and scripts before you add it to an agent.

Standards signals

Meets the agentskills.io required fields.

FrontmatterPresent and parsed
Spec: frontmatter
nameMeets the spec (1-64 chars, a-z 0-9 hyphens)
Spec: name
descriptionPresent, 1-1,024 characters
Spec: description
compatibilityAbsent or under 500 characters
Spec: compatibility
Name matches folderYes (spec-to-code-compliance)
Spec: name
allowed-toolsUsed Note: experimental in the spec; support varies by agent.
Spec: allowed-tools

Observed from the public SKILL.md at the commit above on 2026-10-23. Not a certification: AAIF and the Agent Skills project don't certify skills. Validate your own skill with skills-ref validate.

Source repotrailofbits/skills
Pathplugins/spec-to-code-compliance/skills/spec-to-code-compliance/SKILL.md
Commit checked1e0cb77d071a
Repo licenseCC · we list metadata only
Files7
ScriptsNone
Instructions7,145 characters
Deepest folder1 below the skill folder
Rules version2026-10-22

Re-check the latest version How skill checks work

Is this wrong or out of date? Email us. Skills data built 2026-10-23; rules as of 2026-10-22.

Rule-based checks of public files against Microsoft's documented load rules, not tested in Copilot Studio or Microsoft 365 Copilot. Independent project, not affiliated with Microsoft.