spec-brainstorm — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited spec-brainstorm (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Conversational design workshop for substantial work that produces a focused, reviewed spec.
One question at a time. Multiple approaches explored. Design approved in sections. Ruthless scope control. No implementation until design is approved.
Run this skill only after atelier-orchestrator selects a Spec-backed Plan or the human explicitly requests a spec. Bounded work should go directly to spec-plan for an Inline Plan. Do not reclassify the planning mode here.
docs/specs/YYYY-MM-DD-<feature>/
└── design.md ← This skill's outputRequirements are inline — no separate requirements.json needed.
This skill may create or update only the design.md shown above. It may inspect the repository and discuss drafts in conversation, but it must not modify any other file, create plan.json, create tracker entries, invoke another workflow skill, or write implementation code. This boundary still applies when the human asks to brainstorm, plan, and implement in one request. Finish design.md, report it, and stop.
These principles apply to every spec, every time.
Persisted specs are for work whose discovery, architecture, dependencies, or coordination needs justify a durable artifact. Do not pull bounded work into this workflow merely because it touches multiple files or takes time. That work belongs in an Inline Plan.
Break the system into units with one clear purpose each. Well-defined interfaces between them. Each unit independently understandable and independently testable. If you can't explain a unit's job in one sentence, it's doing too much. Apply oracle-codebase-design: deep modules, seams placed where behaviour varies, and the interface as the test surface.
Explore the current structure first. Follow existing patterns. Targeted improvements only. No unrelated refactoring. Understand why things are the way they are before proposing changes. Treat loaded skills as relevant guidance, not as a requirement to apply every pattern they contain.
If the request describes multiple independent subsystems, flag it immediately. Decompose into sub-projects before diving into details. Each substantial sub-project gets its own spec and plan; bounded sub-projects can use Inline Plans. A spec that tries to cover three subsystems helps no one.
Keep migrations separate from authorization, product behavior, infrastructure, schema, and test-platform projects. Do not use a migration as permission to redesign adjacent systems.
Remove unnecessary features from all designs. If a capability isn't needed for the first user story, it doesn't go in the spec. Every feature is a cost — to build, to test, to maintain, to understand later. Push back on scope creep during discovery.
Future consumers do not justify shared infrastructure. A "reusable foundation" may describe an architectural quality, but it is not a user story or a current requirement.
Before diving in, understand where you are.
docs/specs/ for previous work. What domain modelexists? What patterns are established? What has been built before?
on existing work, extending it, or something greenfield?
This is silent — don't narrate it. Let the context inform where you focus.
Ask questions to understand what to build. Skip this step if requirements are already clear from context (existing specs, human provided details, etc.).
Ask one question at a time. Multiple choice preferred when possible — give 2-4 concrete options rather than open-ended prompts. Keep the conversation moving.
Good: "Should this be real-time or batch-processed? (a) Real-time via WebSocket, (b) Periodic polling every 30s, (c) On-demand when user requests it."
Bad: "How should the data synchronization work?"
Before asking any detail questions, assess scope. If the request describes multiple independent subsystems (e.g., "build a notification system with email, SMS, push, and an admin dashboard"):
propose a decomposition."
Do not try to spec everything in one document.
During discovery, push back on scope:
If the human insists, include it — but flag the trade-off in the spec.
Adapt these to context. Not all are needed every time.
If you already know answers from orientation, confirm rather than ask.
Tell the human: "Based on my research, here's my understanding of what we're building. Does this look right?"
STOP. Wait for human confirmation.
Read the relevant codebase deeply. Not signatures — implementations, edge cases, error handling, data flows. Trace callers and callees. Read tests to understand expected behaviour.
When research spans more than a few files, delegate it to a read-only subagent per area (see Delegation in atelier-orchestrator) and assemble the research table from their cited findings.
Collect research findings for the spec as the foundation. Do not write design.md until the approved design sections are assembled in Step 4c.
The research section must map each relevant concern to the code that already handles it and the current requirement that drives the decision:
| Concern | Existing solution | Decision | Current requirement |
|---|---|---|---|
| IDs | Shared parser and ID type | reuse | Parse route parameters |
Use only reuse, modify, delete, or new in the Decision column. Every new concept must map to a present requirement; a future or hypothetical consumer does not qualify.
Tell the human: "I've written the research section of the spec. Ready for you to review before I continue with the design."
STOP. Wait for human review.
Design happens in three phases: explore approaches, present the design in sections, then write the spec file.
Before settling on a design, present 2-3 approaches with trade-offs.
The first approach must keep the existing architecture and make the smallest correct change. Present broader approaches only when a current requirement makes their extra cost relevant. When approaches differ mainly in interface shape, use the design-it-twice reference in oracle-codebase-design.
For each approach, address:
Lead with your recommended option and explain why it wins.
Before asking the human to approve an approach or design batch, remove anything justified only by completeness, consistency, or hypothetical reuse.
Example:
Approach A: Single table with JSON columns - Simple schema, fast to implement - Querying inside JSON is limited, migration pain later - Complexity: Low
>
Approach B: Normalized relational tables - Clean queries, easy to evolve schema - More joins, more migration files, more code - Complexity: Medium
>
Recommendation: Approach B — the query flexibility matters more here than implementation speed.
Get explicit approval on the chosen approach before presenting the design.
Tell the human: "Which approach should we go with? Or should I explore a different direction?"
STOP. Wait for human to choose an approach.
Present the design in batches. Get approval after each batch before continuing.
Sections already confirmed in earlier steps (Problem, Scope, Constraints, Context) are written into the spec from those confirmations — do not re-present them.
Batch A: User Stories — the contract you're designing against. Formal stories with acceptance criteria and priorities. If rejected: revise. If the rejection reveals a scope misunderstanding, loop back to Discovery (Step 2).
Batch B: Architecture — component design, domain modeling, and layer boundaries. Use oracle-codebase-design and any installed language-specific architecture or API-design skills relevant to your stack. Then present: component structure, domain model, where business logic lives, where IO lives, where untrusted input is parsed (the external seam), and the seam each module is tested through. If rejected: revise. If the rejection undermines the chosen approach, offer to return to approach exploration (4a). If it reveals a fundamental gap, loop back to Research (Step 3). If the detail reveals the work is far more complex than estimated, say so and offer to revisit the approach.
Batch C: API Design + Data Model — contracts derived from the approved architecture. Skip sections that don't apply, but say so explicitly ("No API changes — moving to Trade-offs"). Never skip silently. If rejected: revise. If the rejection implicates the architecture, go back to Batch B.
Batch D: Trade-offs + Open Questions — alternatives considered, why this approach wins, known limitations, anything unresolved. Usually revisable inline.
Each batch ends with:
Tell the human: "Does this look right?"
STOP. Wait for approval before continuing.
If you loop twice on the same batch, stop and ask:
"We've looped on [batch] twice. Should we reconsider the approach?"
Terminology discipline: while drafting batches, challenge terms against CONTEXT.md and record resolved terminology in design.md. Do not update CONTEXT.md from this skill. If domain confusion runs deep, suggest pausing for oracle-grill-me before continuing.
Once all batches are approved, write the full spec document.
#### What the spec should contain
# Feature Name
## Problem
- What problem are we solving
- Who has this problem
- How they solve it today
## Scope
- **In scope:** [specific capabilities]
- **Out of scope:** [explicitly deferred]
## User Stories
- US-1: As a [role], I want [action], so that [benefit]
- Given X, when Y, then Z
- Priority: must/should/could
## Constraints
- [Technical or business constraints]
## Context
- What exists today, how it works end-to-end
- Existing patterns and conventions
- Dependencies and integration points
- Gotchas, assumptions, technical debt
## Architecture
- Component structure (functional core / effectful edge)
- Domain model: entities, value objects, aggregates
- Where business logic lives, where IO lives
## API Design
- Endpoints, request/response contracts
- Error handling approach
- Event contracts (published/consumed)
## Data Model
- Schema design, access patterns
- Migrations needed
## Trade-offs
- Alternatives considered
- Why this approach wins
- Known limitations
## Open Questions
- Anything unresolved needing human inputScale each section to complexity — a few sentences if straightforward, detailed if nuanced.
#### Reference implementations
If the human provides reference code — from open source, from elsewhere in the codebase — use it as a concrete guide. Working from a reference produces dramatically better designs.
#### Self-review
After writing the file, check it with fresh eyes:
section should have real content or be removed.
Architecture section says "stateless" but the Data Model includes session state, resolve the conflict.
If the spec covers more than one independent subsystem, it should have been decomposed in Step 2. If it's still too broad, flag it now.
pick one interpretation, state it explicitly, and let the human correct you.
hypothetical reuse. Confirm every remaining new concept maps to a current requirement.
Substance rule: if a fix changes the substance of an approved section, re-present that section for approval. Wording and consistency fixes go inline — note them at handoff.
Tell the human:
"Brainstorm complete. Design written todocs/specs/<path>/design.md. A separatespec-planinvocation can createplan.jsonafter you approve this document."
If the human requests changes — in conversation or by annotating the file — address every note, update the spec, and re-run the self-review. If a change alters the substance of an approved section, re-present that section for approval before continuing. Resolve questions that affect scope, architecture, contracts, data, security, or task ordering before handoff.
Stop after reporting the completed design.md. Do not invoke spec-plan, offer to continue automatically, create plan.json, or write code. The human must start the next phase with a separate request.
If planning reveals design flaws, loop back to research. See atelier-orchestrator for iteration patterns.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.