Is brainstorming safe?
Grade A, 98/100. No meaningful risk found.
You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).
Abrainstorming
skills/brainstorming98/100 · No meaningful risk found1 low
brainstorming
skills/brainstormingYou MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or planning anything new, in software or out of it (a talk, a business, a renovation).
- Content hash
- sha256:76096af618e6d2f68c3225af28c2f77f3e68734c4f73ddc6eae670fa914b9a59
- Files
- 8
- Quality
- 100/100
Security findings
- lowHides actions from the userSL102 · skills/brainstorming/visual-companion.md:46
Save `screen_dir` and `state_dir` from the response. With `--open`, the browser opens itself when you push the first screen — you don't need to ask the user to…The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.
Files in this skill
- SKILL.md9.8 KB
- builder-check-prompt.md881 B
- visual-companion.md13.1 KB
- scripts/frame-template.html7.9 KB
- scripts/helper.js5.5 KB
- scripts/server.cjs25.1 KB
- scripts/start-server.sh6.7 KB
- scripts/stop-server.sh3.2 KB
Questions about brainstorming
- Is brainstorming safe to install?
- Our scanner gave brainstorming grade A (98/100): no meaningful risk found. It matched 1 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install brainstorming in Claude Code or Codex?
- Run skillhash add github:obra/superpowers/skills/brainstorming. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if brainstorming changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from obra/superpowers
- A
requesting-code-review
302kobra/superpowers
Use when completing tasks, implementing major features, or before merging to verify work meets requirements
No security findings - A
diagnosing-superpowers
302kobra/superpowers
Use when a superpowers session went wrong and your human partner wants to know why — repeated work, ignored plans, stumbles, poor results, a skill that didn't fire, "it took too long", "why is it so expensive", "what is it doing" — or wants to build a bug report for the superpowers maintainers, for the current session or a past one identified by id or path, on any harness.
No security findings - A
dispatching-parallel-agents
302kobra/superpowers
Use when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies
No security findings - A
executing-plans
302kobra/superpowers
Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available
No security findings - A
finishing-a-development-branch
302kobra/superpowers
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work
No security findings - A
receiving-code-review
302kobra/superpowers
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
No security findings - A
subagent-driven-development
302kobra/superpowers
Use when executing implementation plans with independent tasks in the current session
No security findings - A
writing-skills
302kobra/superpowers
Use when creating new skills, editing existing skills, or verifying skills work before deployment
No security findings