deep-brainstorming — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited deep-brainstorming (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Research-hardened brainstorming that catches biases agents naturally introduce. Collapses what would otherwise be 3-4 sessions of iterative discovery into one disciplined session.
REQUIRED: Run a standard brainstorming pass first (e.g., superpowers:brainstorming or equivalent). This skill augments brainstorming output — it does not replace it.
digraph when {
"Starting brainstorming?" [shape=diamond];
"Multiple valid tech choices?" [shape=diamond];
"Wrong choice costly to reverse?" [shape=diamond];
"Use regular brainstorming" [shape=box];
"Use deep brainstorming" [shape=box, style=bold];
"Starting brainstorming?" -> "Multiple valid tech choices?";
"Multiple valid tech choices?" -> "Use regular brainstorming" [label="no"];
"Multiple valid tech choices?" -> "Wrong choice costly to reverse?";
"Wrong choice costly to reverse?" -> "Use regular brainstorming" [label="no — easy to swap"];
"Wrong choice costly to reverse?" -> "Use deep brainstorming" [label="yes"];
}Pick intensity based on stakes and time budget. Default to Standard unless stakes clearly call for Quick or Thorough.
| Level | Research Rounds | Bias Audit | Review Phases | When |
|---|---|---|---|---|
| Quick | 1 round, 2-3 agents | Spot-check top recommendation | Verify-fix only | Low-stakes, easily reversible |
| Standard | 2 rounds, 3-4 agents each | Full 9-type audit after each round | Verify-fix + adversarial | Default for most architecture decisions |
| Thorough | 3-4 rounds, 4-6 agents each | Full audit + retroactive sweep | All 3 phases + independent re-verification | High-stakes, expensive to reverse, novel domain |
| Phase | What | Why |
|---|---|---|
| 1. Sanitize vision | Strip tool/vendor names from requirements | Prevents anchoring bias in research |
| 2. Research rounds | Parallel agents with clean prompts, progressive debiasing | Catches marketing/popularity bias |
| 3. Bias audit | Check each round's output against 9 bias types | Agents over-represent popular tools |
| 4. Independent verify | Check key claims via web/docs yourself | Catches hallucinated benchmarks |
| 5. Claim provenance | Record source, quote, verification method for every cited number | Prevents stat drift across sessions |
| 6. Assemble spec | Progressive file capture, one section at a time | Survives compaction |
| 7. Three-phase review | Verify-fix, adversarial, security/ops | Each type catches different classes of bugs |
| 8. Quality gate | "Is this objectively best?" challenge on final spec | Catches premature satisfaction |
Extract the client brief into a clean requirements document. This is the anchor for all research.
Strip: All tool names, frameworks, architecture patterns, vendor references. Keep: What it does, who uses it, hard constraints (language, platform, compliance). Save as: <project-docs-dir>/<project>-vision.md
Scoping discipline: Only include requirements the client actually stated. If a requirement wasn't in the brief, it doesn't belong in the vision. Agents inject phantom requirements from training data (compliance frameworks, accessibility standards, monitoring stacks). Challenge every requirement: "Did the client ask for this, or did an agent add it?"
Non-Requirements section: Explicitly list what the client did NOT ask for in the vision doc. This is the primary defense against phantom requirements — research agents that recommend solutions to Non-Requirements get flagged immediately.
Prompt rules:
Agent discipline (mandatory for ALL researcher agents):
Round structure:
Consensus guard: If all agents in a round converge on the same tool, that's a red flag — not validation. Force dissent: "What's the strongest alternative to [consensus pick] and under what conditions would it win?"
Prompt review cycle: Before launching each round, present prompts to the user for review and revision. Agents internalize biased framing invisibly — the user catches phrasing that anchors research. Specific things to check: did any functional description smuggle in a tool name? Did "agentic orchestration" imply a specific architecture? Soften loaded terms to neutral descriptions.
Full reset option (Thorough): For the final research round, discard all prior findings: "All previous research counts as zero. Start from the requirements only." This prevents anchoring to earlier rounds' conclusions and surfaces genuinely different approaches.
Convergence table: After each round, produce a cross-round comparison table showing every decision layer with what each round recommended. Items that converge across rounds get high confidence. Items that diverge get "benchmark to decide" status. This table is the primary decision tool — not any single round's output.
For detailed prompt templates, see references/research-prompts.md.
Check after EVERY research round. Audit the full output, not just the recommendations.
| Bias | Signal | Detection |
|---|---|---|
| Marketing | Most-blogged tool recommended as best | Check: is the recommendation backed by benchmarks or by blog post count? |
| Popularity | Most-downloaded/starred treated as winner | Check: do downloads measure quality or awareness? |
| License | Defaulting to OSS or to commercial without comparison | Check: was the full landscape evaluated, or just one license type? |
| Information landscape | Domain keywords trigger unrelated associations | Check: is the recommendation actually relevant to THIS use case? |
| Training data | Stale versions, deprecated tools, renamed SDKs | Check: verify version numbers and project status against official sources |
| Vendor benchmark | Performance numbers sourced from the tool's own maker | Check: find independent verification or note as unverified |
| Hallucinated evidence | Specific benchmark numbers or repo URLs that don't exist | Check: locate the original source. If source doesn't exist, the claim is fabricated. (e.g., agent cites "93.2% MAP" for a tool — number not on any leaderboard) |
| Consensus blindspot | All agents converge but miss actual leaders | Check: when ALL agents agree, force dissent AND verify against authoritative leaderboards/rankings. (e.g., all agents recommend tool X while leaderboard shows Y and Z rank higher) |
| Phantom requirements | Agent adds requirements the client never stated | Check: trace every requirement to the client brief. If not there, it's phantom. (e.g., agent injects compliance framework triggered by a keyword in the brief) |
Retroactive sweep: Bias found in one section means the same bias likely exists in ALL sections. Audit every previous section for the same pattern before proceeding.
Do not trust agent output for factual claims. The orchestrator verifies directly — not via more agents. The orchestrator has full synthesis context and can cross-reference claims against actual leaderboard URLs in a way a fresh agent cannot.
Positive claims (assertions):
Negative claims ("X doesn't exist") — NEVER accept from a single agent:
pip index versions X or PyPI searchpython -c "from X import Y"pip show X or official docsVerification chain termination — three types of evidence that break the loop:
pip show, pip index versions, python -c, HuggingFace APIAgents verifying agents is infinite recursion. Only local verification produces ground truth.
Synthesis robustness audit: Before moving from research to design, categorize EVERY recommendation into three tiers:
Only Robust items enter the spec with confidence. Single-source items enter with caveats. Unverified items are dropped or flagged for benchmarking.
For every cited number, benchmark, or attributed claim, record:
| Field | What to capture |
|---|---|
| Claim | The exact assertion (e.g., "11.4x faster than pgvector") |
| Source | Title, authors, DOI/URL |
| What source says | Direct quote, not paraphrase |
| Verification | Method used (which agents, which URLs, how many confirmed) |
| Status | Verified (2+ sources) / Single-source / Unverified / Vendor-only |
| Date | When verified |
Mark unverified claims explicitly in the spec. Never let an unverified claim propagate into planning.
Write each design section to a file as it's approved. Assemble into one spec at the end.
<project-docs-dir>/<project>-section-N-<topic>.mdThis protects against context compaction losing approved work.
After assembling the spec, run the review phases required by your selected intensity level. Each phase is a separate agent with NO context from prior phases.
Phase R1 — Verify-fix: Standard review for consistency, completeness, formatting. Fix issues, verify fixes are clean.
Phase R2 — Adversarial (MANDATORY for Standard+): "You are reviewing a spec that passed standard review. Your job is to find what the standard review missed. Don't trust the previous approval. Challenge every architectural claim, every tool selection, every assumption. Find contradictions between sections."
Phase R3 — Security/Operations: "Focus exclusively on: security vulnerabilities, scalability bottlenecks, error handling gaps, deployment complexity, testing gaps, operational burden. Ignore formatting and style."
Each phase must end with a clean verification pass before proceeding to the next.
Anti-skip rule: "The plan already went through N agents" is the EXACT rationalization this rule targets. Different phases catch different classes of issues. R1 catches consistency. R2 catches architectural contradictions and YAGNI. R3 catches security/ops gaps. Evidence: adversarial review has caught 7+ YAGNI violations and multiple critical issues invisible to standard review and to deepening agents in real use. Skipping R2 because "agents already reviewed" is the single most expensive mistake in this process.
Finding engagement depth: For each finding from any review phase, READ the actual code cited (not the reviewer's summary), VERIFY the claim is real, ESTIMATE fix cost, and FIX if cheaper than documenting a deferral. "Tracked as deferred" is not engagement — it's categorization theater. If the fix is 1-5 lines, just fix it.
For exact review prompts, see references/review-protocols.md.
After all reviews pass, challenge the entire spec one final time.
Protocol:
This gate has surfaced real issues in every single use. It is not optional.
When the gate surfaces issues: Fix the issue, then re-run the relevant review phase (not just the gate). The gate is a detector, not a fixer — changes made in response need the same review rigor as the original spec.
Self-assessment is not verification. Evaluating your own work against your own criteria is circular. Re-read actual source artifacts fresh.
After the spec is approved:
| Bias | One-line test |
|---|---|
| Marketing | "Is this recommended because it's best, or because it's most-marketed?" |
| Popularity | "Do downloads/stars measure quality or awareness?" |
| License | "Did we evaluate the full landscape or just one license type?" |
| Info landscape | "Is this recommendation actually relevant to OUR use case?" |
| Training data | "Is this version/name current? Check official sources." |
| Vendor benchmark | "Who ran this benchmark? Find independent verification." |
| Hallucinated evidence | "Does the cited source actually exist? Locate the original." |
| Consensus blindspot | "All agents agree — did they check leaderboards, or echo each other?" |
| Phantom requirements | "Did the client ask for this, or did an agent add it?" |
| Mistake | What happens | Fix |
|---|---|---|
| Tool names in research prompts | Agents anchor, don't discover alternatives | Only describe functional requirements |
| Trust agent benchmark numbers | Hallucinated or vendor-sourced numbers persist | Verify every number against original source |
| Fix bias in one section only | Same bias exists in all — fixed one, missed five | Retroactive audit after any bias found |
| Standard review only | Misses architectural contradictions and security gaps | All three review phases |
| Open-source default | Excludes potentially better commercial options | Evaluate full landscape, quality-first |
| All agents agree | Treated as validation when it's consensus bias | Force dissent — find the strongest alternative |
| Unverified claims enter planning | Bad numbers propagate and compound | Claim provenance tracking with status field |
| Self-assessment as verification | Circular — checking your work against your own criteria | Re-read source artifacts fresh, use independent agent |
| Phantom requirements | Agents inject requirements the client never stated | Check every requirement against the actual brief |
Items marked (S) = Standard+Thorough only. Items marked (T) = Thorough only. Unmarked = all intensities.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.