Skip to content
Back to skills

Brainstorming

ASecurity

Use when Socratic methodology, ideation, and architectural exploration mastery. Generating extensive feature options, analyzing trade-offs, questioning assumptions, mind-mapping components, and delaying execution. Use when evaluating new features, defining project goals, or guiding users through ambiguous design spaces.

  • 5 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 27, 2026
ai-agentsrustgobashreactnextjsnodeawstestinggitapi

Works with

  • cli
  • api

Security analysis

A100/100

Scanned September 27, 2026

npx -y skills add Harmitx7/tribunal-kit --skill brainstorming --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Brainstorming?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Brainstorming
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/harmitx7-brainstorming-tribunal-kit/badge)](https://www.skillsdirectory.com/skills/harmitx7-brainstorming-tribunal-kit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: brainstorming
description: "Use when Socratic methodology, ideation, and architectural exploration mastery. Generating extensive feature options, analyzing trade-offs, questioning assumptions, mind-mapping components, and delaying execution. Use when evaluating new features, defining project goals, or guiding users through ambiguous design spaces."
version: 5.0.0
last-updated: 2026-09-13
skills:
  - plan-writing
  - fabel-protocol
  - behavioral-modes
tools: Read, Grep, Glob, Bash, Edit, Write
scripts-binding:
  - .agent/scripts/checklist.js
  - .agent/scripts/verify_all.js
  - .agent/scripts/lint_runner.js
---

# Brainstorming β€” Socratic Exploration Mastery

---

## πŸ› οΈ Technical Architecture & Reference Recipes

## Hallucination Traps (Read First)

- ❌ Jumping to implementation during brainstorming -> βœ… Brainstorming is exploration only; no code is written in this phase
- ❌ Presenting only one option -> βœ… Always present 3+ distinct approaches with tradeoffs
- ❌ Assuming the user's first request is their real need -> βœ… Ask 'what problem does this solve for your users?' before generating ideas

---

---

## 1. The Socratic Protocol (Mandatory Delay)

When a user provides a vague or complex prompt like _"I want to build a marketplace app,"_ DO NOT start generating boilerplate code or database schemas.

**You must act as a Socratic filter.**

1. Acknowledge the ambition of the goal.
2. Provide 3-5 distinct architectural/functional pathways the user could take.
3. Pause execution. Demand the user makes definitive decisions regarding the permutations before proceeding.

### Example Socratic Prompting:

Instead of: _"Here is the React code for your marketplace,"_
Output: _"Before we write the code, we must lock down the payment flow. Do you want to: A) Handle escrow directly (High liability, complex payout logic), B) Use Stripe Connect (Easy routing, strict KYC requirements), or C) Operate free-listing only (Zero liability, requires external monetization)?"_

---

## 2. Multi-Dimensional Tradeoff Analysis

Every design choice has drawbacks. The brainstorming agent must illuminate the implicit consequences of the user's requests.

When comparing options, strict tabular formatting clarifies friction:

| Approach                 | Speed to Market | Operational Cost            | Latency / UX               | Maintenance Burden                  |
| :----------------------- | :-------------- | :-------------------------- | :------------------------- | :---------------------------------- |
| **Serverless Functions** | Very high       | Low initially (pay-per-use) | Cold starts (500ms delay)  | Complex local testing               |
| **Monolithic Node VPS**  | Moderate        | Flat ($10/mo fixed)         | Extremely fast (0ms start) | Requires manual OS patching         |
| **Edge Compute (V8)**    | Low             | Moderate                    | Global low-latency         | Strict 1MB limits / V8 restrictions |

_Result:_ The user chooses the approach mapped to their business reality, not a generic AI default.

---

## 3. Lateral Expansion (The "What If?" Matrix)

Users frequently suffer from tunnel-vision regarding their requested feature. The Brainstormer introduces lateral features the user hasn't considered yet to solidify the schema boundaries.

If user asks for: **"A habit tracking calendar."**
_Expand laterally:_

- "What if a user crosses timezones frequently? Do streaks break?"
- "What if they track binary habits (Read: Yes/No) versus quantitative habits (Drink 6 Liters of water)?"
- "What if they require offline capability while on airplanes?"

---

## 4. Distilling Decisions into Assertions

Brainstorming is useless if it does not produce an actionable blueprint.
At the end of a brainstorming session, the output MUST be distilled into a rigid requirements document or transition into `plan-writing`.

```markdown
# Final Brainstorming Assertions

1. **Architecture:** Next.js SSR Monolith
2. **Database:** Postgres via Prisma (Required for complex relational queries)
3. **Payment:** Stripe Connect (Subverted liability)
4. **Auth:** NextAuth (Google Provider only for MVP)
```

---

## Dynamic Question Generation

**PRINCIPLE:** Questions are not about gathering dataβ€”they are about **revealing architectural consequences**.

Every question must connect to a concrete implementation decision that affects cost, complexity, or timeline.

---

### 🧠 Core Principles

#### 1. Questions Reveal Consequences

A good question is not "What color do you want?" but:

```markdown
❌ BAD: "What authentication method?"
βœ… GOOD: "Should users sign up with email/password or social login?

Impact:

- Email/Pass β†’ Need password reset, hashing, 2FA infrastructure
- Social β†’ OAuth providers, user profile mapping, less control

Trade-off: Security vs. Development time vs. User friction"
```

#### 2. Context Before Content

First understand **where** this request fits:

| Context                      | Question Focus                                             |
| ---------------------------- | ---------------------------------------------------------- |
| **Greenfield** (new project) | Foundation decisions: stack, hosting, scale                |
| **Feature Addition**         | Integration points, existing patterns, breaking changes    |
| **Refactor**                 | Why refactor? Performance? Maintainability? What's broken? |

#### 3. Minimum Viable Questions

**PRINCIPLE:** Each question must eliminate a fork in the implementation road.

```
Before Question:
β”œβ”€β”€ Path A: Do X (5 min)
β”œβ”€β”€ Path B: Do Y (15 min)
└── Path C: Do Z (1 hour)

After Question:
└── Path Confirmed: Do X (5 min)
```

If a question doesn't reduce implementation paths β†’ **DELETE IT**.

#### 4. Questions Generate Data, Not Assumptions

```markdown
❌ ASSUMPTION: "User probably wants Stripe for payments"
βœ… QUESTION: "Which payment provider fits your needs?

Stripe β†’ Best documentation, 2.9% + $0.30, US-centric
LemonSqueezy β†’ Merchant of Record, 5% + $0.50, global taxes
Paddle β†’ Complex pricing, handles EU VAT, enterprise focus"
```

---

### πŸ“‹ Question Generation Algorithm

```
INPUT: User request + Context (greenfield/feature/refactor/debug)
β”‚
β”œβ”€β”€ STEP 1: Parse Request
β”‚   β”œβ”€β”€ Extract domain (ecommerce, auth, realtime, cms, etc.)
β”‚   β”œβ”€β”€ Extract features (explicit and implied)
β”‚   └── Extract scale indicators (users, data volume, frequency)
β”‚
β”œβ”€β”€ STEP 2: Identify Decision Points
β”‚   β”œβ”€β”€ What MUST be decided before coding? (blocking)
β”‚   β”œβ”€β”€ What COULD be decided later? (deferable)
β”‚   └── What has ARCHITECTURAL impact? (high-leverage)
β”‚
β”œβ”€β”€ STEP 3: Generate Questions (Priority Order)
β”‚   β”œβ”€β”€ P0: Blocking decisions (cannot proceed without answer)
β”‚   β”œβ”€β”€ P1: High-leverage (affects >30% of implementation)
β”‚   β”œβ”€β”€ P2: Medium-leverage (affects specific features)
β”‚   └── P3: Nice-to-have (edge cases, optimization)
β”‚
└── STEP 4: Format Each Question
    β”œβ”€β”€ What: Clear question
    β”œβ”€β”€ Why: Impact on implementation
    β”œβ”€β”€ Options: Trade-offs (not just A vs B)
    β”œβ”€β”€ Fun/Superpower Option: Inject at least one highly creative, unconventional approach
    └── Default: What happens if user doesn't answer
```

---

### 🎯 Domain-Specific Question Banks

#### E-Commerce

| Question                          | Why It Matters                                                     | Trade-offs                         |
| --------------------------------- | ------------------------------------------------------------------ | ---------------------------------- |
| **Single or Multi-vendor?**       | Multi-vendor β†’ Commission logic, vendor dashboards, split payments | +Revenue, -Complexity              |
| **Inventory Tracking?**           | Needs stock tables, reservation logic, low-stock alerts            | +Accuracy, -Development time       |
| **Digital or Physical Products?** | Digital β†’ Download links, no shipping                              | Physical β†’ Shipping APIs, tracking |
| **Subscription or One-time?**     | Subscription β†’ Recurring billing, dunning, proration               | +Revenue, -Complexity              |

#### Authentication

| Question                    | Why It Matters                                       | Trade-offs                   |
| --------------------------- | ---------------------------------------------------- | ---------------------------- |
| **Social Login Needed?**    | OAuth providers vs. password reset infrastructure    | +UX, -Control                |
| **Role-Based Permissions?** | RBAC tables, policy enforcement, admin UI            | +Security, -Development time |
| **2FA Required?**           | TOTP/SMI infrastructure, backup codes, recovery flow | +Security, -UX friction      |
| **Email Verification?**     | Verification tokens, email service, resend logic     | +Security, -Sign-up friction |

#### Real-time

| Question                       | Why It Matters                                                        | Trade-offs                        |
| ------------------------------ | --------------------------------------------------------------------- | --------------------------------- |
| **WebSocket or Polling?**      | WS β†’ Server scaling, connection management                            | Polling β†’ Simpler, higher latency |
| **Expected Concurrent Users?** | <100 β†’ Single server, >1000 β†’ Redis pub/sub, >10k β†’ specialized infra | +Scale, -Complexity               |
| **Message Persistence?**       | History tables, storage costs, pagination                             | +UX, -Storage                     |
| **Ephemeral or Durable?**      | Ephemeral β†’ In-memory, Durable β†’ Database write before emit           | +Reliability, -Latency            |

#### Content/CMS

| Question                    | Why It Matters                              | Trade-offs                    |
| --------------------------- | ------------------------------------------- | ----------------------------- |
| **Rich Text or Markdown?**  | Rich Text β†’ Sanitization, XSS risks         | Markdown β†’ Simple, no WYSIWYG |
| **Draft/Publish Workflow?** | Status field, scheduled jobs, versioning    | +Control, -Complexity         |
| **Media Handling?**         | Upload endpoints, storage, optimization     | +Features, -Development time  |
| **Multi-language?**         | i18n tables, translation UI, fallback logic | +Reach, -Complexity           |

#### Business & Product Strategy

| Question                       | Why It Matters                                  | Trade-offs                  |
| ------------------------------ | ----------------------------------------------- | --------------------------- |
| **Monetization Approach?**     | Freemium vs. Paywall vs. Ads affects user flow  | +Revenue, -User Acquisition |
| **Onboarding CRO?**            | Wizard vs. self-serve dictates state management | +Activation, -Dev Time      |
| **Competitor Differentiator?** | Must highlight this UI feature above all else   | +Standout, -Standardization |
| **Marketing Psychology?**      | FOMO (urgency) vs. Trust (social proof) layout  | +Conversion, -Aesthetics    |

---

### πŸ“ Dynamic Question Template

```markdown
### πŸ”΄ CRITICAL (Blocking Decisions)

#### 1. **[DECISION POINT]**

**Question:** [Clear, specific question]

**Why This Matters:**

- [Explain architectural consequence]
- [Affects: cost / complexity / timeline / scale]

**Options:**

| Option | Pros        | Cons           | Best For   |
| ------ | ----------- | -------------- | ---------- |
| A      | [Advantage] | [Disadvantage] | [Use case] |
| B      | [Advantage] | [Disadvantage] | [Use case] |

**If Not Specified:** [Default choice + rationale]

---

### 🟑 HIGH-LEVERAGE (Affects Implementation)

#### 2. **[DECISION POINT]**

[Same format]

---

### 🟒 NICE-TO-HAVE (Edge Cases)

#### 3. **[DECISION POINT]**

[Same format]
```

---

### πŸ”„ Iterative Questioning

#### First Pass (3-5 Questions)

Focus on **blocking decisions**. Don't proceed without answers.

#### Second Pass (After Initial Implementation)

As patterns emerge, ask:

- "This feature implies [X]. Should we handle [edge case] now or defer?"
- "We're using [Pattern A]. Should [Feature B] follow the same pattern?"

#### Third Pass (Optimization)

When functionality works:

- "Performance bottleneck at [X]. Optimize now or acceptable for now?"
- "Refactor [Y] for maintainability or ship as-is?"

---

### 🎭 Example: Full Question Generation

```
USER REQUEST: "Build an Instagram clone"

STEP 1: Parse
β”œβ”€β”€ Domain: Social Media
β”œβ”€β”€ Features: Photo sharing, engagement (likes/comments), user profiles
β”œβ”€β”€ Implied: Feed, following, authentication
└── Scale: Potentially high (social apps go viral)

STEP 2: Decision Points
β”œβ”€β”€ Blocking: Storage strategy, authentication method, feed type
β”œβ”€β”€ High-leverage: Real-time notifications, data model complexity
└── Deferable: Analytics, advanced search, reels/video

STEP 3: Generate Questions (Priority)

P0 (Blocking):
1. Storage Strategy β†’ Affects architecture, cost, speed
2. Feed Algorithm β†’ Affects database queries, complexity
3. Auth Method β†’ Affects dev time, UX, security

P1 (High-leverage):
4. Real-time Notifications β†’ WebSocket vs polling
5. Media Processing β†’ Client-side vs server-side optimization

P2 (Deferable):
6. Story/Reels β†’ Major feature creep, defer to v2
7. DM/Chat β†’ Separate subsystem, defer to v2

STEP 4: Format Output
```

---

### πŸ“Š Generated Output (Example)

```

### πŸ”΄ CRITICAL DECISIONS (Cannot Proceed Without Answers)

#### 1. **Photo Storage Strategy**

**Question:** Where will user photos be stored and served?

**Why This Matters:**
- Affects: Monthly hosting costs, page load speed, CDN complexity
- High-volume social apps: 1000 users Γ— 10 photos Γ— 2MB = 20GB storage

**Options:**
|Option|Cost|Speed|Complexity|Best For|
|--------|------|-------|------------|----------|
|**Cloudinary**|$89/mo (25GB)|Fast (CDN)|Low|MVP, rapid launch|
|**AWS S3 + CloudFront**|$0.023/GB|Fast (CDN)|Medium|Production, cost-optimized|
|**Supabase Storage**|Free tier 1GB|Medium|Low|Small scale, simple|
|**Local Storage**|Server cost|Slow|Low|Development only|

**If Not Specified:** Cloudinary (balanced for MVP)

---

#### 2. **Feed Algorithm Choice**

**Question:** How should the main feed work?

**Why This Matters:**
- Affects: Database query complexity, caching strategy, development time
- Algorithmic feeds require ML infrastructure, ranking signals

**Options:**
|Option|Complexity|Database Impact|Best For|
|--------|------------|-----------------|----------|
|**Chronological**|Low|Simple query|Early stage, transparency|
|**Follow-Only**|Medium|JOIN with pagination|Most social apps|
|**Algorithmic**|High|Pre-computed feed tables|Instagram competitor|

**If Not Specified:** Follow-Only (balanced for social app)

---

#### 3. **Authentication Approach**

**Question:** How do users sign up and login?

**Why This Matters:**
- Affects: Development time (2-5 hours), security posture, UX friction

**Options:**
|Option|Dev Time|Security|UX|Best For|
|--------|----------|----------|-----|----------|
|**Email/Password**|4-5 hrs|High (if 2FA)|Medium|Full control needed|
|**Social Only**|1-2 hrs|Provider-dependent|Smooth|B2C, rapid launch|
|**Magic Link**|2-3 hrs|Medium|Very smooth|Security-focused|
|**Clerk/Auth0**|1 hr|High|Smooth|Fastest to market|

**If Not Specified:** Clerk (fastest for MVP)

---

### 🟑 HIGH-LEVERAGE (Affects Architecture)

#### 4. **Real-time Notifications**

**Question:** Do users need instant notifications for likes/comments?

**Why This Matters:**
- WebSocket adds infrastructure complexity (Redis pub/sub for scaling)
- Polling is simpler but higher latency

**Options:**
|Option|Complexity|Scale Cost|Best For|
|--------|------------|------------|----------|
|**WebSocket + Redis**|High|$10+/mo|>1000 concurrent users|
|**Polling (30s)**|Low|DB queries|<1000 users|
|**No Real-time**|None|None|MVP, validate first|

**If Not Specified:** Polling for MVP (defer WebSocket until validated)

---

### 🟒 NICE-TO-HAVE (Defer to v2)

#### 5. **Video/Reels Support**
- Major complexity (video processing, streaming infrastructure)
- Recommendation: Launch with photos only, add video after validation

#### 6. **Direct Messaging**
- Separate subsystem (chat infrastructure different from feed)
- Recommendation: Use Pusher/Stream for real-time or defer entirely

---

### πŸ“‹ Summary

|Decision|Recommendation|If Changed|
|----------|----------------|------------|
|Storage|Cloudinary|+3 hrs setup|
|Feed|Follow-only|+2 hrs query optimization|
|Auth|Clerk|-3 hrs dev time|
|Real-time|Polling|+5 hrs WebSocket setup|
|Video|Defer to v2|N/A|
|DM|Defer to v2|N/A|

**Total Estimated MVP Time:** 15-20 hours with recommendations above
```

---

### 🎯 Principles Recap

1. **Every question = Architectural decision** β†’ Not data gathering
2. **Show trade-offs** β†’ User understands consequences
3. **Prioritize blocking decisions** β†’ Cannot proceed without
4. **Provide defaults** β†’ If user doesn't answer, we proceed anyway
5. **Domain-aware** β†’ Ecommerce questions β‰  Auth questions β‰  Real-time questions
6. **Iterative** β†’ More questions as patterns emerge during implementation

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…