
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
spec-kit-dumper
Advanced tools
A CLI tool to set up Kilocode or Clinerules for Spec-Driven Development workflows
A CLI tool to set up Kilocode or Clinerules for Spec-Driven Development workflows in any project workspace.
Install globally using npm:
npm install -g spec-kit-dumper
The easiest way to get started is with the interactive setup:
spec-kit init
This will guide you through choosing between Kilocode or Clinerules setup.
Set up Kilocode custom modes for Spec-Driven Development:
spec-kit kilocode
This copies the following to your current directory:
memory/ - Constitutional memory and update checklistsmodes/ - Specify, Plan, and Tasks mode definitionsscripts/ - Shell scripts for feature managementtemplates/ - Specification and planning templates.kilocodemodes - Kilocode configuration fileSet up Clinerules for Spec-Driven Development with Cline AI:
spec-kit clinerules
This copies the following to your current directory:
memory/ - Constitutional memory and update checklistsmodes/ - Specify, Plan, and Tasks mode definitionsscripts/ - Shell scripts for feature managementtemplates/ - Specification and planning templates.clinerules/spec-kit.md - Clinerules configuration for slash commandsBoth commands support these options:
--force or -f: Overwrite existing files without confirmation--verbose or -v: Show detailed output during setupExamples:
spec-kit kilocode --force --verbose
spec-kit clinerules -f -v
Check what's currently set up in your workspace:
spec-kit status
memory/constitution.md - Core principles and guidelinesmemory/constitution_update_checklist.md - Update proceduresmodes/specify.md - Feature specification modemodes/plan.md - Implementation planning modemodes/tasks.md - Task breakdown modescripts/create-new-feature.sh - Create feature branches and specsscripts/setup-plan.sh - Set up implementation planningscripts/check-task-prerequisites.sh - Validate task requirementsscripts/get-feature-paths.sh - Get feature file pathsscripts/update-agent-context.sh - Update agent contextscripts/common.sh - Common utility functionstemplates/spec-template.md - Feature specification templatetemplates/plan-template.md - Implementation plan templatetemplates/tasks-template.md - Task breakdown templatetemplates/agent-file-template.md - Agent file template.kilocodemodes - Defines custom modes for Kilocode workspace.clinerules/spec-kit.md - Slash command delegation rules for Cline AIThis tool sets up a complete Spec-Driven Development workflow with three phases:
/specify or Kilocode Specify mode)/plan or Kilocode Plan mode)/tasks or Kilocode Tasks mode)After running spec-kit kilocode, use the custom modes in your Kilocode workspace:
After running spec-kit clinerules, use slash commands with Cline:
/specify Create a user authentication system with login and logout
/plan Focus on security and scalability requirements
/tasks Prioritize test-driven development approach
To work on this project:
git clone <repository-url>
cd spec-kit-dumper
npm install
npm link # For local testing
MIT License - see LICENSE file for details.
Contributions are welcome! Please read the contributing guidelines and submit pull requests for any improvements.
FAQs
A CLI tool to set up Kilocode or Clinerules for Spec-Driven Development workflows
We found that spec-kit-dumper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.