discover — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited discover (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Declarative phase skill. Invoked by the prd-taskmaster orchestrator when current_phase is DISCOVER. Never called directly by a user.
The one rule: invoke `superpowers:brainstorming` for discovery, intercept before it chains to `writing-plans` — we control the exit, not the brainstorm skill.
mcp__plugin_prd_go__check_gate(phase="DISCOVER", evidence={}) for diagnostics.check_gate is an EXIT gate: it verifies the evidence to advance, not to enter. On first DISCOVER entry you have no evidence yet (the User Approval / Self-Approval Gate below produces user_approved=true OR auto_classification=CLEAR with assumptions_documented), so a gate_passed: false here is EXPECTED — the state machine's legal transitions already guarantee only legal entry.
against re-running a completed phase or skipping ahead from SETUP.
switch to Autonomous Mode:
.claude/ralph-loop.local.md exists in the project rootauto-enter / auto-approve daemon is running against this session--autonomous flag/pentest-wtf, or /ralph-loopOtherwise proceed in Interactive Mode (default).
Copy into your response before running the procedure:
DISCOVERY CHECKLIST:
- [ ] Mode detected (Interactive vs Autonomous)
- [ ] Goal captured from skill args or soul purpose
- [ ] Adaptive questions completed (one at a time)
- [ ] Constraints extracted and listed
- [ ] Scale classified (Solo / Team / Enterprise)
- [ ] Discovery summary captured for GENERATE phase
- [ ] User approved (Interactive) or summary committed (Autonomous)superpowers:brainstorming with the goal as input.at a time. Let it drive the Q&A rhythm.
writing-plans, STOP. Do NOT let it invoke writing-plans. Capture the brainstorm output (design, requirements, decisions) into local state instead. The prd-taskmaster orchestrator owns the handoff — not superpowers:brainstorming.
AskUserQuestion (seeUser Approval Gate below).
Do NOT invoke `superpowers:brainstorming` — it blocks on user input and will stall an unattended session. Instead, self-brainstorm using this template:
session-context/CLAUDE-soul-purpose.md.
session-context/CLAUDE-activeContext.md for project context.session-context/discovery-{timestamp}.md answering every question the interactive flow would ask:
integrations, regulatory)?
assumptions explicitly so the user can audit them on wake-up.
the user later disagrees, they can reset to that commit and re-run.
Autonomous mode is first-class, not degraded. A well-run autonomous discovery produces a spec the user reads on wake-up and says "yes, that's what I meant" without edits. If you find yourself needing to ask more than two questions the user didn't anticipate, the discovery is under-specified — stop and write a handoff note instead of proceeding.
After brainstorming completes, present via AskUserQuestion:
Discovery Complete:
Goal: [one sentence]
Audience: [who it's for]
Approach: [proposed solution]
Key decisions: [list]
Constraints: [known limitations]
Scale: [Solo | Team | Enterprise]
Proceed to generate spec? (or refine further)Write the discovery summary to session-context/discovery-{timestamp}.md and commit it. No interactive approval is required, but assumptions MUST be explicit in the written summary so the user can audit on wake-up.
If brainstorming (or self-brainstorming) produces thin answers, fill gaps with reasonable assumptions instead of forcing extra questions:
Document every assumption in the discovery summary so GENERATE can surface them in the spec.
Before moving to GENERATE, explicitly extract and list all constraints mentioned during discovery. Emit this block:
CONSTRAINTS CAPTURED:
- Tech stack: [e.g., "must use Python", "React frontend", "no new dependencies"]
- Timeline: [e.g., "MVP in 2 weeks", "no deadline"]
- Team: [e.g., "solo developer", "3-person team"]
- Budget: [e.g., "free tier only", "$500/month max"]
- Integration: [e.g., "must work with existing Postgres DB", "connects to Stripe"]
- Regulatory: [e.g., "HIPAA compliant", "GDPR", "none specified"]
- Domain-specific: [e.g., "authorized pentest scope: 10.0.0.0/24 only",
"learning goal: intermediate level"]Present this list alongside the discovery summary. These constraints MUST be passed to GENERATE — they inform spec content, task decomposition depth, and acceptance criteria. If a constraint is mentioned in discovery but missing from the spec, that's a bug.
Infer project scale from discovery answers and set decomposition guidance:
| Scale | Signal | Task Cap | Subtask Depth |
|---|---|---|---|
| Solo | "just me", "side project", "learning" | 8–12 tasks | 2–3 subtasks each |
| Team | "small team", "MVP", "product", "startup" | 12–20 tasks | 3–5 subtasks each |
| Enterprise | "compliance", "multiple teams", "platform" | 20–30 tasks | 5–8 subtasks each |
Pass the scale classification to GENERATE so task count is calibrated, not arbitrary.
After approval (Interactive) or commit (Autonomous), constraints captured, and scale classified:
mcp__plugin_prd_go__advance_phase(expected_current="DISCOVER", target="GENERATE", evidence={"user_approved": True, "constraints_captured": True, "scale": "<Solo|Team|Enterprise>", "assumptions_documented": True}).The call atomically transitions pipeline.json from DISCOVER to GENERATE. The expected_current field is the compare-and-swap guard; evidence is stored under phase_evidence[GENERATE] for audit.
prd-taskmaster skill). Do NOT invokeGENERATE directly — the orchestrator re-reads current_phase and routes.
The prd-taskmaster pipeline owns the exit, not superpowers:brainstorming.
stalled, ask one more targeted question or write a handoff note — don't silently self-approve in Interactive Mode.
It blocks on user input and will stall the session. Self-brainstorm with the template above.
GENERATE reads this block — missing constraints become missing spec sections downstream.
This skill does not use explicit process termination. A hard block reports the reason and returns control to the orchestrator; the orchestrator decides whether to surface to the user.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.