spectra-app — security grade SAFE, quality 65/100

Security audit verdict: SAFE · quality 65/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by kaochenlong · Codex Skill · ★ 736

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is spectra-app safe to install? View the security audit →

About spectra-app

Spectra A desktop app for managing spec documents — visually track changes, specs, and tasks. What is Spectra? Spectra is a Spec-Driven Development (SDD) tool made up of a desktop app, a CLI, and skills for coding agents. Your coding agent uses the skills to propose changes, write specs, and carry out tasks, while the app lets you browse specs, track progress, and archive completed work — no more manually managing spec directories, YAML configs, and Markdown files. Spectra was inspired by OpenSpec. It started as a GUI frontend for OpenSpec, but after using it for a while, I found that OpenSpec's workflow didn't quite match my own development habits. So I decided to rewrite the entire workflow — simplifying commands, adding the features I wanted, and shaping it into a tool that fits my daily development rhythm.

ai-agentsclaude-codeclicodexcoding-agentsdeveloper-toolssddspec-driven-developmentspecifications

Quick Facts

Stars736
Forks31
LanguageTypeScript
CategoryCodex Skill
Quality Score64.7739145719309/100
Open Issues45
Last Updated2026-09-13
Created2026-02-04
Platformsclaude-code, cli, codex, node
Est. Tokens~16k

Compatible Skills

These tools work well together with spectra-app for enhanced workflows:

  • cc-sdd — semantic(0.39)+complementary+rare_topics+same_lang+similar_pop+shared_platform (68%)
  • gentle-pi — semantic(0.33)+complementary+rare_topics+same_lang+similar_pop+shared_platform (66%)
  • mcp-server-spec-driven-development — semantic(0.44)+complementary+same_lang+similar_pop+shared_platform (66%)
  • thinkrail — semantic(0.38)+complementary+same_lang+similar_pop+shared_platform (63%)

spectra-app alternative? Top 6 similar tools

Looking for a spectra-app alternative? If you're comparing spectra-app with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • pilot-shell by maxritter · ⭐ 2.1k

    Professional context and harness engineering for Claude Code and OpenAI Codex. Build production-grade software

  • ai-devkit by codeaholicguy · ⭐ 1.6k

    The control plane for AI coding agents.

  • cc-sdd by gotalab · ⭐ 3.7k

    Turn approved specs into long-running autonomous implementation. A minimal, adaptable SDD harness with Agent S

  • agtx by fynnfluegge · ⭐ 1.5k

    🏄🏼‍♂️ The blackboard for coding agents - agentic development environment for claude code, codex, cursor, ope

  • smart-ralph by tzachbon · ⭐ 544

    Spec-driven development with smart compaction. Claude Code plugin combining Ralph Wiggum loop with structured

  • ok-skills by mxyhi · ⭐ 490

    Curated AI coding agent skills and AGENTS.md playbooks for Codex, Claude Code, Cursor, OpenClaw, and other SKI

More Codex Skill Tools

Explore other popular codex skill tools:

View all Codex Skill tools →

Popular TypeScript Agent Tools

Frequently Asked Questions

What is spectra-app?

spectra-app is Spec-driven development for coding agents — a desktop app, a CLI, and skills for Codex, Claude Code, Cursor, Copilot, Antigravity and Junie. It is categorized as a Codex Skill with 736 GitHub stars.

What programming language is spectra-app written in?

spectra-app is primarily written in TypeScript. It covers topics such as ai-agents, claude-code, cli.

How do I install or use spectra-app?

You can find installation instructions and usage details in the spectra-app GitHub repository at github.com/kaochenlong/spectra-app. The project has 736 stars and 31 forks, indicating an active community.

What are the best alternatives to spectra-app?

The top alternatives to spectra-app on Agent Skills Hub include pilot-shell, ai-devkit, cc-sdd. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Codex Skill tools