Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Systematic Debugging

ASecurity

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes

8 stars
0 votes
0 copies
0 views
Added 10/6/2026
ai-agentsgotestingdebuggingrefactoringcode-reviewgit

Security Analysis

A100/100

Pro scans all 6 files and shows the line behind each finding

Scanned 10/6/2026

$npx -y skills add bordenet/superpowers-plus --skill systematic-debugging --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Systematic Debugging?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Systematic Debugging
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/bordenet-systematic-debugging/badge)](https://www.skillsdirectory.com/skills/bordenet-systematic-debugging)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
skill.md
---
name: systematic-debugging
source: superpowers-plus
augment_menu: true
# Override rationale: Condensed from upstream ~296 lines. Focuses on root-cause-first
# discipline with explicit "NO FIXES WITHOUT INVESTIGATION" gate. Removes
# verbose examples; adds structured hypothesis/evidence tracking format.
# (Do not hard-code a line count here; it drifts.)
triggers: ["/sp-debug", "debug this", "test failure", "unexpected behavior", "build failure", "not working", "investigate error", "root cause"]
anti_triggers: ["write tests first", "TDD", "implement feature", "create new"]
description: Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes
coordination:
  group: engineering
  order: 3
  requires: []
  enables: ["investigation-state", "think-twice"]
  escalates_to: ["thinking-orchestrator"]
  internal: false
composition:
  consumes: [challenge, code-changes]
  produces: [root-cause, investigation-log]
  capabilities: [debugs-issues, analyzes-code]
  priority: 10
---

# Systematic Debugging

## When to Use

- Any bug, test failure, or unexpected behavior — before proposing fixes
- Build failures, runtime errors, or flaky tests
- NOT for: feature design (`brainstorming`), code review (`providing-code-review`)

**Core principle:** ALWAYS find root cause before attempting fixes.

> **Wrong skill?** Feature design → `brainstorming`. Code review → `providing-code-review`.

```text
NO FIXES WITHOUT ROOT CAUSE INVESTIGATION FIRST
```

If you haven't completed Phase 1, you cannot propose fixes.

## Human Partner Signals You're Doing It Wrong

If the human says any of these, **STOP immediately**:

- "You already tried that"
- "That's not the problem"
- "We've been going in circles"
- "Stop and think about this differently"
- "You're making this too complicated"
- "Let's step back"

Do not defend the current approach. Do not continue it. Acknowledge what they said, ask what they're seeing that you're missing, and restart the investigation from scratch.

## The Four Phases

### Phase 1: Root Cause Investigation

BEFORE attempting ANY fix:

1. **Read Error Messages Carefully** — stack traces completely, note line numbers, file paths, error codes
2. **Reproduce Consistently** — exact steps, every time? If not reproducible, gather more data, don't guess
3. **Check Recent Changes** — git diff, recent commits, new dependencies, config changes
4. **Gather Evidence in Multi-Component Systems** — for each component boundary: log what enters, log what exits, verify env/config propagation. Run once to find WHERE it breaks.
5. **Trace Data Flow** — where does bad value originate? Trace up the call stack to find the source. Fix at source, not symptom. See `root-cause-tracing.md` for complete technique.

### Phase 2: Pattern Analysis

1. **Find working examples** in same codebase — what works that's similar to what's broken?
2. **Compare against references** — read reference implementations COMPLETELY, don't skim
3. **Identify differences** — list every difference, don't assume "that can't matter"
4. **Understand dependencies** — components, settings, config, environment, assumptions

### Phase 3: Hypothesis and Testing

1. **Form single hypothesis** — "I think X is the root cause because Y"
2. **Test minimally** — smallest possible change, one variable at a time
3. **Verify** — worked → Phase 4. Didn't work → new hypothesis, don't stack fixes.

### Phase 4: Implementation

1. **Create failing test case** — use `superpowers:test-driven-development` skill
2. **Implement single fix** — ONE change, no "while I'm here" improvements
3. **Verify** — test passes, no other tests broken
4. **Record the refactoring disposition** as a `Refactoring-Disposition:` line in the fix commit message (or the `investigation-state` note, if the session has one) — same vocabulary as `hotfix-charter`: `REFACTOR_NOW` (the refactor *is* the fix), `PARK` (you saw a cleanup worth doing and deliberately deferred it — name what), or `NONE` (nothing structural worth refactoring) — plus one concrete reason. Default `NONE` for a clean fix; `PARK` only when you actually spotted deferrable structure. This is a wrap-up note, NOT license for a "while I'm here" edit (item 2 still governs: ONE change).
5. **If 2+ fixes failed** — STOP. Question the architecture. Each fix revealing new problems in different places = wrong architecture, not wrong fix. Discuss with human before continuing.

## Red Flags — STOP, Return to Phase 1

- "Quick fix for now, investigate later"
- "Just try changing X and see"
- Proposing solutions before tracing data flow
- "One more fix attempt" after 2+ failures

## Recovery: After 2+ Failed Fix Attempts

When fixes keep failing, the problem is usually misdiagnosed. Don't try a third fix — escalate. If 2 or more distinct approaches have failed, the underlying architecture or assumptions are wrong. Stop adding fixes.

1. **Invoke `think-twice`** — verbalize what you've tried and why each failed
2. **Question the layer** — are you fixing the right component? Check one layer up and one layer down
3. **Check assumptions** — list every assumption you've made. Test the least-certain one first. Write down what you assumed was true at the start and check each against evidence; the broken assumption is likely the root cause.
4. **Ask the human** — "I've tried X and Y, both failed because Z. My current hypothesis is W — does that match your understanding?"

## Common Rationalizations

| Rationalization | Why it fails |
|-----------------|--------------|
| "I'm almost sure it's X" | Certainty without evidence is bias. Check assumptions first. |
| "Let me try one more thing" | After 2+ failed fixes, trying harder is wrong. Question the premise. |
| "This worked before, so it must still work" | Environments change. Verify don't assume. |
| "The error message says X so it must be X" | Error messages describe symptoms not root causes. |
| "I'll add more logging to find it" | If you're adding logging blindly, you don't have a hypothesis. Form one first. |
| "It's probably the same bug as last time" | Pattern matching skips root cause analysis. Verify. |
| "The tests pass so it must be fixed" | Tests prove the tested path works. Verify the actual failure path. |
| "It's working now, I don't know why" | Non-deterministic fixes will fail again. Find the root cause. |

## Failure Modes

| Failure | Symptom | Recovery |
|---------|---------|----------|
| Wrong layer | Fix works locally but breaks integration | Check one layer up: is the caller sending wrong data? |
| Confirmation bias | Only testing the happy path after fix | Write a test for the original failure case first |
| Environment mismatch | Works on your machine, fails in CI/prod | Compare env vars, dependency versions, OS differences. Don't assume equivalence |

## Supporting Techniques

- `root-cause-tracing.md` — trace bugs backward through call stack
- `defense-in-depth.md` — add validation at multiple layers
- `condition-based-waiting.md` — replace arbitrary timeouts with condition polling

## Companion Skills

- `investigation-state` — persist debugging context across sessions for multi-day bugs
- `think-twice` — dispatch fresh sub-agent when stuck in a hypothesis loop
- `adversarial-search` — search for the WRONG value when symptoms contradict expectations
- `receiving-code-review` — responding to review feedback
- `failure-autopsy` — post-mortem on failed approaches
- `hotfix-charter` — the mechanically-enforced home of the REFACTOR_NOW/PARK/NONE disposition vocabulary (Phase 4 item 4)

Attribution

bordenetbordenet
View sourceSee grades on GitHubMore from bordenet →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698621 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →