Skip to content
Back to skills

Brainstorming

ASecurity

**MANDATORY:** Use for complex/vague requests, new features, updates.

  • 3 stars
  • 0 votes
  • 0 copies
  • 6 views
  • Added September 12, 2026
businessrustgoawsgitapidatabasesecurityperformancedocumentation

Works with

  • cli
  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add HaoNgo232/agent-bridge-kit --skill brainstorming --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Brainstorming?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Brainstorming
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/haongo232-brainstorming-agent-bridge-kit/badge)](https://www.skillsdirectory.com/skills/haongo232-brainstorming-agent-bridge-kit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: brainstorming
description: **MANDATORY:** Use for complex/vague requests, new features, updates.
---

# Brainstorming & Communication Protocol

> **MANDATORY:** Use for complex/vague requests, new features, updates.

---

## πŸ›‘ SOCRATIC GATE (ENFORCEMENT)

### When to Trigger

| Pattern | Action |
|---------|--------|
| "Build/Create/Make [thing]" without details | πŸ›‘ ASK 3 questions |
| Complex feature or architecture | πŸ›‘ Clarify before implementing |
| Update/change request | πŸ›‘ Confirm scope |
| Vague requirements | πŸ›‘ Ask purpose, users, constraints |

### 🧠 Memory Check (2026.5.13 β€” Before Questioning)

> Before asking questions, check if past context exists:

```
0. CHECK MEMORY β€” Does .agent/memory/MEMORY.md exist?
   β†’ YES: Read index. Apply relevant past decisions silently.
          Skip questions already answered in memory.
   β†’ NO: Proceed with standard Socratic Gate.
```

### 🚫 MANDATORY: 3 Questions Before Implementation

1. **STOP** - Do NOT start coding
2. **CHECK** - Read `.agent/memory/` for past context on this topic
3. **ASK** - Minimum 3 questions (skip any already answered via memory):
   - 🎯 Purpose: What problem are you solving?
   - πŸ‘₯ Users: Who will use this?
   - πŸ“¦ Scope: Must-have vs nice-to-have?
4. **WAIT** - Get response before proceeding
5. **SAVE** - After brainstorming, save key decisions: `/remember [decision]`

---

## 🧠 Dynamic Question Generation

**β›” NEVER use static templates.** Read `dynamic-questioning.md` for principles.

### Core Principles

| Principle | Meaning |
|-----------|---------|
| **Questions Reveal Consequences** | Each question connects to an architectural decision |
| **Context Before Content** | Understand greenfield/feature/refactor/debug context first |
| **Minimum Viable Questions** | Each question must eliminate implementation paths |
| **Generate Data, Not Assumptions** | Don't guessβ€”ask with trade-offs |

### Question Generation Process

```
1. Parse request β†’ Extract domain, features, scale indicators
2. Identify decision points β†’ Blocking vs. deferable
3. Generate questions β†’ Priority: P0 (blocking) > P1 (high-leverage) > P2 (nice-to-have)
4. Format with trade-offs β†’ What, Why, Options, Default
```

### Question Format (MANDATORY)

```markdown
### [PRIORITY] **[DECISION POINT]**

**Question:** [Clear question]

**Why This Matters:**
- [Architectural consequence]
- [Affects: cost/complexity/timeline/scale]

**Options:**
| Option | Pros | Cons | Best For |
|--------|------|------|----------|
| A | [+] | [-] | [Use case] |

**If Not Specified:** [Default + rationale]
```

**For detailed domain-specific question banks and algorithms**, see: `dynamic-questioning.md`

---

## Progress Reporting (PRINCIPLE-BASED)

**PRINCIPLE:** Transparency builds trust. Status must be visible and actionable.

### Status Board Format

| Agent | Status | Current Task | Progress |
|-------|--------|--------------|----------|
| [Agent Name] | βœ…πŸ”„β³βŒβš οΈ | [Task description] | [% or count] |

### Status Icons

| Icon | Meaning | Usage |
|------|---------|-------|
| βœ… | Completed | Task finished successfully |
| πŸ”„ | Running | Currently executing |
| ⏳ | Waiting | Blocked, waiting for dependency |
| ❌ | Error | Failed, needs attention |
| ⚠️ | Warning | Potential issue, not blocking |

---

## Error Handling (PRINCIPLE-BASED)

**PRINCIPLE:** Errors are opportunities for clear communication.

### Error Response Pattern

```
1. Acknowledge the error
2. Explain what happened (user-friendly)
3. Offer specific solutions with trade-offs
4. Ask user to choose or provide alternative
```

### Error Categories

| Category | Response Strategy |
|----------|-------------------|
| **Port Conflict** | Offer alternative port or close existing |
| **Dependency Missing** | Auto-install or ask permission |
| **Build Failure** | Show specific error + suggested fix |
| **Unclear Error** | Ask for specifics: screenshot, console output |

---

## Completion Message (PRINCIPLE-BASED)

**PRINCIPLE:** Celebrate success, guide next steps.

### Completion Structure

```
1. Success confirmation (celebrate briefly)
2. Summary of what was done (concrete)
3. How to verify/test (actionable)
4. Next steps suggestion (proactive)
```

---

## Communication Principles

| Principle | Implementation |
|-----------|----------------|
| **Concise** | No unnecessary details, get to point |
| **Visual** | Use emojis (βœ…πŸ”„β³βŒ) for quick scanning |
| **Specific** | "~2 minutes" not "wait a bit" |
| **Alternatives** | Offer multiple paths when stuck |
| **Proactive** | Suggest next step after completion |

---

## Anti-Patterns (AVOID)

| Anti-Pattern | Why |
|--------------|-----|
| Jumping to solutions before understanding | Wastes time on wrong problem |
| Assuming requirements without asking | Creates wrong output |
| Over-engineering first version | Delays value delivery |
| Ignoring constraints | Creates unusable solutions |
| "I think" phrases | Uncertainty β†’ Ask instead |

---


---

# Dynamic Question Generation

> **PRINCIPLE:** Questions are not about gathering dataβ€”they are about **revealing architectural consequences**.
>
> Every question must connect to a concrete implementation decision that affects cost, complexity, or timeline.

---

## 🧠 Core Principles

### 1. Questions Reveal Consequences

A good question is not "What color do you want?" but:

```markdown
❌ BAD: "What authentication method?"
βœ… GOOD: "Should users sign up with email/password or social login?

   Impact:
   - Email/Pass β†’ Need password reset, hashing, 2FA infrastructure
   - Social β†’ OAuth providers, user profile mapping, less control

   Trade-off: Security vs. Development time vs. User friction"
```

### 2. Context Before Content

First understand **where** this request fits:

| Context | Question Focus |
|---------|----------------|
| **Greenfield** (new project) | Foundation decisions: stack, hosting, scale |
| **Feature Addition** | Integration points, existing patterns, breaking changes |
| **Refactor** | Why refactor? Performance? Maintainability? What's broken? |
| **Debug** | Symptoms β†’ Root cause β†’ Reproduction path |

### 3. Minimum Viable Questions

**PRINCIPLE:** Each question must eliminate a fork in the implementation road.

```
Before Question:
β”œβ”€β”€ Path A: Do X (5 min)
β”œβ”€β”€ Path B: Do Y (15 min)
└── Path C: Do Z (1 hour)

After Question:
└── Path Confirmed: Do X (5 min)
```

If a question doesn't reduce implementation paths β†’ **DELETE IT**.

### 4. Questions Generate Data, Not Assumptions

```markdown
❌ ASSUMPTION: "User probably wants Stripe for payments"
βœ… QUESTION: "Which payment provider fits your needs?

   Stripe β†’ Best documentation, 2.9% + $0.30, US-centric
   LemonSqueezy β†’ Merchant of Record, 5% + $0.50, global taxes
   Paddle β†’ Complex pricing, handles EU VAT, enterprise focus"
```

---

## πŸ“‹ Question Generation Algorithm

```
INPUT: User request + Context (greenfield/feature/refactor/debug)
β”‚
β”œβ”€β”€ STEP 1: Parse Request
β”‚   β”œβ”€β”€ Extract domain (ecommerce, auth, realtime, cms, etc.)
β”‚   β”œβ”€β”€ Extract features (explicit and implied)
β”‚   └── Extract scale indicators (users, data volume, frequency)
β”‚
β”œβ”€β”€ STEP 2: Identify Decision Points
β”‚   β”œβ”€β”€ What MUST be decided before coding? (blocking)
β”‚   β”œβ”€β”€ What COULD be decided later? (deferable)
β”‚   └── What has ARCHITECTURAL impact? (high-leverage)
β”‚
β”œβ”€β”€ STEP 3: Generate Questions (Priority Order)
β”‚   β”œβ”€β”€ P0: Blocking decisions (cannot proceed without answer)
β”‚   β”œβ”€β”€ P1: High-leverage (affects >30% of implementation)
β”‚   β”œβ”€β”€ P2: Medium-leverage (affects specific features)
β”‚   └── P3: Nice-to-have (edge cases, optimization)
β”‚
└── STEP 4: Format Each Question
    β”œβ”€β”€ What: Clear question
    β”œβ”€β”€ Why: Impact on implementation
    β”œβ”€β”€ Options: Trade-offs (not just A vs B)
    └── Default: What happens if user doesn't answer
```

---

## 🎯 Domain-Specific Question Banks

### E-Commerce

| Question | Why It Matters | Trade-offs |
|----------|----------------|------------|
| **Single or Multi-vendor?** | Multi-vendor β†’ Commission logic, vendor dashboards, split payments | +Revenue, -Complexity |
| **Inventory Tracking?** | Needs stock tables, reservation logic, low-stock alerts | +Accuracy, -Development time |
| **Digital or Physical Products?** | Digital β†’ Download links, no shipping | Physical β†’ Shipping APIs, tracking |
| **Subscription or One-time?** | Subscription β†’ Recurring billing, dunning, proration | +Revenue, -Complexity |

### Authentication

| Question | Why It Matters | Trade-offs |
|----------|----------------|------------|
| **Social Login Needed?** | OAuth providers vs. password reset infrastructure | +UX, -Control |
| **Role-Based Permissions?** | RBAC tables, policy enforcement, admin UI | +Security, -Development time |
| **2FA Required?** | TOTP/SMI infrastructure, backup codes, recovery flow | +Security, -UX friction |
| **Email Verification?** | Verification tokens, email service, resend logic | +Security, -Sign-up friction |

### Real-time

| Question | Why It Matters | Trade-offs |
|----------|----------------|------------|
| **WebSocket or Polling?** | WS β†’ Server scaling, connection management | Polling β†’ Simpler, higher latency |
| **Expected Concurrent Users?** | <100 β†’ Single server, >1000 β†’ Redis pub/sub, >10k β†’ specialized infra | +Scale, -Complexity |
| **Message Persistence?** | History tables, storage costs, pagination | +UX, -Storage |
| **Ephemeral or Durable?** | Ephemeral β†’ In-memory, Durable β†’ Database write before emit | +Reliability, -Latency |

### Content/CMS

| Question | Why It Matters | Trade-offs |
|----------|----------------|------------|
| **Rich Text or Markdown?** | Rich Text β†’ Sanitization, XSS risks | Markdown β†’ Simple, no WYSIWYG |
| **Draft/Publish Workflow?** | Status field, scheduled jobs, versioning | +Control, -Complexity |
| **Media Handling?** | Upload endpoints, storage, optimization | +Features, -Development time |
| **Multi-language?** | i18n tables, translation UI, fallback logic | +Reach, -Complexity |

---

## πŸ“ Dynamic Question Template

```markdown
Based on your request for [DOMAIN] [FEATURE]:

## πŸ”΄ CRITICAL (Blocking Decisions)

### 1. **[DECISION POINT]**

**Question:** [Clear, specific question]

**Why This Matters:**
- [Explain architectural consequence]
- [Affects: cost / complexity / timeline / scale]

**Options:**
| Option | Pros | Cons | Best For |
|--------|------|------|----------|
| A | [Advantage] | [Disadvantage] | [Use case] |
| B | [Advantage] | [Disadvantage] | [Use case] |

**If Not Specified:** [Default choice + rationale]

---

## 🟑 HIGH-LEVERAGE (Affects Implementation)

### 2. **[DECISION POINT]**
[Same format]

---

## 🟒 NICE-TO-HAVE (Edge Cases)

### 3. **[DECISION POINT]**
[Same format]
```

---

## πŸ”„ Iterative Questioning

### First Pass (3-5 Questions)
Focus on **blocking decisions**. Don't proceed without answers.

### Second Pass (After Initial Implementation)
As patterns emerge, ask:
- "This feature implies [X]. Should we handle [edge case] now or defer?"
- "We're using [Pattern A]. Should [Feature B] follow the same pattern?"

### Third Pass (Optimization)
When functionality works:
- "Performance bottleneck at [X]. Optimize now or acceptable for now?"
- "Refactor [Y] for maintainability or ship as-is?"

---

## 🎭 Example: Full Question Generation

```
USER REQUEST: "Build an Instagram clone"

STEP 1: Parse
β”œβ”€β”€ Domain: Social Media
β”œβ”€β”€ Features: Photo sharing, engagement (likes/comments), user profiles
β”œβ”€β”€ Implied: Feed, following, authentication
└── Scale: Potentially high (social apps go viral)

STEP 2: Decision Points
β”œβ”€β”€ Blocking: Storage strategy, authentication method, feed type
β”œβ”€β”€ High-leverage: Real-time notifications, data model complexity
└── Deferable: Analytics, advanced search, reels/video

STEP 3: Generate Questions (Priority)

P0 (Blocking):
1. Storage Strategy β†’ Affects architecture, cost, speed
2. Feed Algorithm β†’ Affects database queries, complexity
3. Auth Method β†’ Affects dev time, UX, security

P1 (High-leverage):
4. Real-time Notifications β†’ WebSocket vs polling
5. Media Processing β†’ Client-side vs server-side optimization

P2 (Deferable):
6. Story/Reels β†’ Major feature creep, defer to v2
7. DM/Chat β†’ Separate subsystem, defer to v2

STEP 4: Format Output
```

---

## πŸ“Š Generated Output (Example)

```
Based on your Instagram clone request:

## πŸ”΄ CRITICAL DECISIONS (Cannot Proceed Without Answers)

### 1. **Photo Storage Strategy**

**Question:** Where will user photos be stored and served?

**Why This Matters:**
- Affects: Monthly hosting costs, page load speed, CDN complexity
- High-volume social apps: 1000 users Γ— 10 photos Γ— 2MB = 20GB storage

**Options:**
| Option | Cost | Speed | Complexity | Best For |
|--------|------|-------|------------|----------|
| **Cloudinary** | $89/mo (25GB) | Fast (CDN) | Low | MVP, rapid launch |
| **AWS S3 + CloudFront** | $0.023/GB | Fast (CDN) | Medium | Production, cost-optimized |
| **Supabase Storage** | Free tier 1GB | Medium | Low | Small scale, simple |
| **Local Storage** | Server cost | Slow | Low | Development only |

**If Not Specified:** Cloudinary (balanced for MVP)

---

### 2. **Feed Algorithm Choice**

**Question:** How should the main feed work?

**Why This Matters:**
- Affects: Database query complexity, caching strategy, development time
- Algorithmic feeds require ML infrastructure, ranking signals

**Options:**
| Option | Complexity | Database Impact | Best For |
|--------|------------|-----------------|----------|
| **Chronological** | Low | Simple query | Early stage, transparency |
| **Follow-Only** | Medium | JOIN with pagination | Most social apps |
| **Algorithmic** | High | Pre-computed feed tables | Instagram competitor |

**If Not Specified:** Follow-Only (balanced for social app)

---

### 3. **Authentication Approach**

**Question:** How do users sign up and login?

**Why This Matters:**
- Affects: Development time (2-5 hours), security posture, UX friction

**Options:**
| Option | Dev Time | Security | UX | Best For |
|--------|----------|----------|-----|----------|
| **Email/Password** | 4-5 hrs | High (if 2FA) | Medium | Full control needed |
| **Social Only** | 1-2 hrs | Provider-dependent | Smooth | B2C, rapid launch |
| **Magic Link** | 2-3 hrs | Medium | Very smooth | Security-focused |
| **Clerk/Auth0** | 1 hr | High | Smooth | Fastest to market |

**If Not Specified:** Clerk (fastest for MVP)

---

## 🟑 HIGH-LEVERAGE (Affects Architecture)

### 4. **Real-time Notifications**

**Question:** Do users need instant notifications for likes/comments?

**Why This Matters:**
- WebSocket adds infrastructure complexity (Redis pub/sub for scaling)
- Polling is simpler but higher latency

**Options:**
| Option | Complexity | Scale Cost | Best For |
|--------|------------|------------|----------|
| **WebSocket + Redis** | High | $10+/mo | >1000 concurrent users |
| **Polling (30s)** | Low | DB queries | <1000 users |
| **No Real-time** | None | None | MVP, validate first |

**If Not Specified:** Polling for MVP (defer WebSocket until validated)

---

## 🟒 NICE-TO-HAVE (Defer to v2)

### 5. **Video/Reels Support**
- Major complexity (video processing, streaming infrastructure)
- Recommendation: Launch with photos only, add video after validation

### 6. **Direct Messaging**
- Separate subsystem (chat infrastructure different from feed)
- Recommendation: Use Pusher/Stream for real-time or defer entirely

---

## πŸ“‹ Summary

| Decision | Recommendation | If Changed |
|----------|----------------|------------|
| Storage | Cloudinary | +3 hrs setup |
| Feed | Follow-only | +2 hrs query optimization |
| Auth | Clerk | -3 hrs dev time |
| Real-time | Polling | +5 hrs WebSocket setup |
| Video | Defer to v2 | N/A |
| DM | Defer to v2 | N/A |

**Total Estimated MVP Time:** 15-20 hours with recommendations above
```

---

## 🎯 Principles Recap

1. **Every question = Architectural decision** β†’ Not data gathering
2. **Show trade-offs** β†’ User understands consequences
3. **Prioritize blocking decisions** β†’ Cannot proceed without
4. **Provide defaults** β†’ If user doesn't answer, we proceed anyway
5. **Domain-aware** β†’ Ecommerce questions β‰  Auth questions β‰  Real-time questions
6. **Iterative** β†’ More questions as patterns emerge during implementation

---
*Generated by [Agent Bridge](https://github.com/HaoNgo232/agent-bridge)*

Files in this skill

  • SKILL.md16.4 KB
  • dynamic-questioning.md11.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…