Agent skill · Audited from source
Brainstorming Ideas Into Designs
skill · obra/superpowers-skillsMIT licenceAudited 20 Oct 2026 · source 6d51b9a892b5
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 6d51b9a892b5 and observed filesystem access and no hard-coded secrets. What it does: Skills wiki intro - mandatory workflows, search tool, brainstorming triggers
Cite
Cite this page
ModelsAtlas. “Brainstorming Ideas Into Designs (obra/superpowers-skills)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/obra/brainstorming-ideas-into-designs
Trust audit
Audit 0.4.1 · source read 20 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemDeclared1 observation
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesNot pinnedSome versions float
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 2 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (2)
LOWInsecure cryptocrypto.weak_hash · skills/collaboration/remembering-conversations/tool/src/parser.ts:41
.createHash('md5')- Why
- No further detail recorded for this rule.
- Fix
- —
LOWSupply chainsupply.unpinned · skills/collaboration/remembering-conversations/tool/package.json
@anthropic-ai/claude-agent-sdk, @xenova/transformers, better-sqlite3, sqlite-vec, @types/better-sqlite3, @types/node, tsx, typescript
- Why
- 9 dependency range(s) float
- Fix
- pin exact versions or ship a lockfile
Audit 0.4.1 · source sha 6d51b9a892b5 · 20 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherobra GitHub userOwner of the repository this skill is read from
- Source folderobra/superpowers-skillsThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict6d51b9a892b5A new audit runs when the source changes
- Repository statusArchivedLast push 370 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Skills wiki intro - mandatory workflows, search tool, brainstorming triggers
---
name: Getting Started with Skills
description: Skills wiki intro - mandatory workflows, search tool, brainstorming triggers
when_to_use: when starting any conversation
version: 4.0.2
---
# Getting Started with Skills
## Critical Rules
1. **Use Read tool before announcing skill usage.** The session-start hook does NOT read skills for you. Announcing without calling Read = lying.
2. **Follow mandatory workflows.** Brainstorming before coding. Check for skills before ANY task.
3. **Create TodoWrite todos for checklists.** Mental tracking = steps get skipped. Every time.
## Mandatory Workflow: Before ANY Task
**1. Check skills list** at session start, or run `find-skills [PATTERN]` to filter.
**2. If relevant skill exists, YOU MUST use it:**
- Use Read tool with full path: `${SUPERPOWERS_SKILLS_ROOT}/skills/category/skill-name/SKILL.md`
- Read ENTIRE file, not just frontmatter
- Announce: "I've read [Skill Name] skill and I'm using it to [purpose]"
- Follow it exactly
**Don't rationalize:**
- "I remember this skill" - Skills evolve. Read the current version.
- "Session-start showed it to me" - That was using-skills/SKILL.md only. Read the actual skill.
- "This doesn't count as a task" - It counts. Find and read skills.
**Why:** Skills document proven techniques that save time and prevent mistakes. Not using available skills means repeating solved problems and making known errors.
If a skill for your task exists, you must use it or you will fail at your task.
## Skills with Checklists
If a skill has a checklist, YOU MUST create TodoWrite todos for EACH item.
**Don't:**
- Work through checklist mentally
- Skip creating todos "to save time"
- Batch multiple items into one todo
- Mark complete without doing them
**Why:** Checklists without TodoWrite tracking = steps get skipped. Every time. The overhead of TodoWrite is tiny compared to the cost of missing steps.
**Examples:** skills/testing/test-driven-development/SKILL.md, skills/debugging/systematic-debugging/SKILL.md, skills/meta/writing-skills/SKILL.md
## Announcing Skill Usage
After you've read a skill with Read tool, announce you're using it:
"I've read the [Skill Name] skill and I'm using it to [what you're doing]."
**Examples:**
- "I've read the Brainstorming skill and I'm using it to refine your idea into a design."
- "I've read the Test-Driven Development skill and I'm using it to implement this feature."
- "I've read the Systematic Debugging skill and I'm using it to find the root cause."
**Why:** Transparency helps your human partner understand your process and catch errors early. It also confirms you actually read the skill.
## How to Read a Skill
Every skill has the same structure:
1. **Frontmatter** - `when_to_use` tells you if this skill matches your situation
2. **Overview** - Core principle in 1-2 sentences
3. **Quick Reference** - Scan for your specific pattern
4. **Implementation** - Full details and examples
5. **Supporting files** - Load only when implementing
**Many skills contain rigid rules (TDD, debugging, verification).** Follow them exactly. Don't adapt away the discipline.
**Some skills are flexible patterns (architecture, naming).** Adapt core principles to your context.
The skill itself tells you which type it is.
## Instructions ≠ Permission to Skip Workflows
Your human partner's specific instructions describe WHAT to do, not HOW.
"Add X", "Fix Y" = the goal, NOT permission to skip brainstorming, TDD, or RED-GREEN-REFACTOR.
**Red flags:** "Instruction was specific" • "Seems simple" • "Workflow is overkill"
**Why:** Specific instructions mean clear requirements, which is when workflows matter MOST. Skipping process on "simple" tasks is how simple tasks become complex problems.
## Summary
**Starting any task:**
1. Run find-skills to check for relevant skills
2. If relevant skill exists → Use Read tool with full path (includes /SKILL.md)
3. Announce you're using it
4. Follow what it says
**Skill has checklist?** TodoWrite for every item.
**Finding a relevant skill = mandatory to read and use it. Not optional.**Excerpt, first 4,098 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 6d51b9a
git clone https://github.com/obra/superpowers-skills git -C superpowers-skills checkout 6d51b9a892b5
The author documents no install command, so this uses the repository directly. Our verdict covers commit 6d51b9a892b5 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
6d51b9a892b5
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/obra/brainstorming-ideas-into-designs/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/obra/brainstorming-ideas-into-designs/)
<a href="https://modelsatlas.com/skills/obra/brainstorming-ideas-into-designs/"><img src="https://modelsatlas.com/skills/obra/brainstorming-ideas-into-designs/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about Brainstorming Ideas Into Designs
What does the Brainstorming Ideas Into Designs skill do?
Is Brainstorming Ideas Into Designs safe to install?
What can Brainstorming Ideas Into Designs access on my machine?
Which assistants does Brainstorming Ideas Into Designs work with?
How current is this page?
Sources
- github.com/obra/superpowers-skills — the audited source at commit 6d51b9a892b5 and every finding aboveObserved · 20 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Brainstorming Ideas Into Designs skill do?
- Is Brainstorming Ideas Into Designs safe to install?
- What can Brainstorming Ideas Into Designs access on my machine?