AI architecture proposal skill for turning raw ideas into reviewable architecture maps, assumptions, risks, and handoff notes.
SaferSkills independently audited idea-to-architecture-agent (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Turn raw ideas into reviewable architecture proposals. Preserve the user's intent, expose uncertainty, and produce lean Markdown artifacts that a human can approve, revise, or hand off.
Use this skill when the user has a raw idea, product concept, feature request, business goal, or system goal without an existing implementation.
Do not use this skill to inspect an existing codebase, map an existing system, create file responsibility maps, document current architecture, review boundaries in implemented software, or claim any proposed architecture already exists. Use senior-architect-agent for existing systems, mixed existing/proposed work, architecture handoff, broader architecture mapping, or boundary review.
boundaries, data, risk, cost, compliance, or delivery sequence.
and short tradeoff when it is safe to recommend one.
assumption could invalidate the architecture.
Proposed until approved.
questions, risks, and decisions requiring approval.
limitations are present.
Use these gates to keep the proposal flow enforceable:
user-provided facts are separated from unknowns.
before questioning.
None requiredis written. Each important question includes a recommended default when safe, plus the tradeoff or approval risk.
approval status before proposing architecture. Add assumption severity where relevant.
are marked Proposed before mapping or drafting detail.
After Intake, frame the idea as:
How might we [desired outcome] for [target user] without [constraint]?The frame must identify target user, problem, constraint, and success signal. Use User-provided values when stated directly. Use Assumed only when the inference is safe and reversible. Mark unsafe or boundary-changing gaps as Unknown and ask focused questions before architecture proposal work.
Treat these frames as not ready for architecture proposal:
Use bounded divergence only when the idea is fuzzy, broad, or solution-first. Skip this step when the user gives a clear direction.
Generate 2-4 Proposed product or system directions. Each direction must state target user, core problem, value thesis, scope fit, and major exclusion.
Do not generate module structures, database designs, service boundaries, API contracts, code structure, or implementation tasks during divergence.
Before architecture proposal work, select or recommend one direction.
Evaluate candidate directions by:
Dealbreaker, Important, or Nice-to-haveKeep the recommended direction labeled Proposed until the user approves it. Architecture proposal work starts only after a selected proposed direction exists or the user's direction is already clear.
This skill stops at reviewable architecture proposal work unless the user explicitly approves the proposal and asks for implementation planning.
Do not generate implementation tasks, code structure, database migrations, API contracts, file-level plans, or build steps before proposal approval.
Before implementation planning, output:
current architecture, boundary review, or mixed existing/proposed context, switch to senior-architect-agent.
integration, and no regulated data. Ask 2-3 questions maximum.
questions.
multi-service boundaries, or compliance. Ask until boundary-changing unknowns are resolved or explicitly deferred with approval.
the grill depth question budget and proceed with clearly labeled assumptions. If the user does not answer, continue only with assumptions marked Assumed and Requires approval; do not present the proposal as approved.
medical/legal/financial stakes, or production migration, list approval-required decisions before proposing details.
artifact instead of the full proposal set.
content as proposed.
Stop questioning when all boundary-changing unknowns are either resolved or explicitly deferred with approval. State remaining assumptions clearly before proceeding to proposal work. If the user does not answer, proceed only with explicit assumptions that require approval.
Follow this sequence:
user-provided facts, separate unknowns, and run the complexity scan. Intake gate must pass before intent extraction.
signals, then create a How Might We problem frame. Intent gate must pass before questioning.
separate must-answer from can-assume. Question gate must pass before assumptions.
generate 2-4 proposed product/system directions; otherwise skip.
selected direction labeled Proposed until approved.
approval. Assumption gate must pass before proposing architecture.
and decision options. Proposal gate must pass before mapping workflows or drafting data detail.
sensitive data.
Before finalizing, verify:
Proposed, not approved?Also compare the final proposal scope to the initial idea scope recorded at Intake. If the proposal expanded, list what was added and mark each addition as user-requested, justified by the idea, or requiring approval. Use the Not Doing / Proposed Exclusions list to confirm intentional omissions and scope creep.
idea-brief.md for intent, facts, assumptions, and questions.architecture-proposal.md for proposed system shape and decisions.module-proposal.md for proposed module boundaries.workflow-proposal.md for proposed workflows.data-model-draft.md for proposed entities and relationships.decision-options.md for alternatives requiring approval.risk-register.md for risks and validation steps.ai-agent-notes.md for handoff notes.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.