Skip to content
Back to skills

Codoop Discover

ASecurity

Launch a collaborative product discovery session with multi-role experts (PM, GTM, UI, Architect). Use when exploring 0-to-1 design for a new product or feature. Orchestrates expert agents in-session to draft comprehensive backlog documentation through SNAP clarification, multi-perspective analysis, and consistency auditing.

  • 5 stars
  • 0 votes
  • 0 copies
  • 5 views
  • Added September 19, 2026
developmentgosqlreactnodedockertestinggitapidatabasebackend

Works with

  • claude code
  • cursor
  • cli
  • api

Security analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned September 19, 2026

npx -y skills add Codoop/codoop-flow --skill codoop-discover --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Codoop Discover?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Codoop Discover
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/codoop-codoop-discover/badge)](https://www.skillsdirectory.com/skills/codoop-codoop-discover)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: codoop-discover
description: Launch a collaborative product discovery session with multi-role experts (PM, GTM, UI, Architect). Use when exploring 0-to-1 design for a new product or feature. Orchestrates expert agents in-session to draft comprehensive backlog documentation through SNAP clarification, multi-perspective analysis, and consistency auditing.
---

# Product Discovery & Design Loop

This skill guides the AI to act as an **Orchestrator** running a decentralized, multi-role collaborative pipeline to discover, validate, and architect products or features. It ensures strict avoidance of assumptions, leverages multi-perspective analysis, and produces production-grade BDD specifications and system architectures.

It is designed to be compatible with **Codex**, **Claude Code**, **Cursor Desktop**,
and other coding agents that can read files and write project docs.

## Project Paths

Read `[project_paths]` from the session's explicit config or the Git root's
`.codoop-flow/codoop_flow.toml` (legacy fallback: root `codoop_flow.toml`) before
designing implementation. The Runtime's `codoop.py config-path` resolves the path
from the target repository or a subdirectory.
If it is missing, run the sibling `codoop-init` skill first.

The keys describe the system project type; the values are the real directories
and may use any existing name. Design code only for listed projects. Treat
unlisted systems as external context or contracts, never implementation work.

Also read `output_language`. Use it for every user-facing message, question,
summary, generated document, and delegated role prompt. `"auto"` or a missing
field follows the user's current language. An explicit request for the current
task overrides the config. Translate template headings and labels as needed;
never switch languages merely because a source document or template uses one.

Read `user_role` too; a missing value means `general`. It changes only the live
conversation: use normal professional terms inside the user's field, and explain
cross-field topics in plain language. The user's current request for simpler or
more professional language overrides it. Do not apply this profile to generated
documents, code, reports, or delegated agent prompts; those remain precise and
professional.

## Sub-Agent Expert Roles

This skill invokes the following expert personas from the plugin Runtime (`../../runtime/codoop-flow/agents/`):

- **PM / Product Strategy**: `product-sprint-prioritizer.md`
- **GTM & Pricing**: `sales-offer-lead-gen-strategist.md`
- **UI Designer**: `design-ui-designer.md`
- **Backend Architect**: `engineering-backend-architect.md` (only when `backend` is configured)
- **Software Architect**: `engineering-software-architect.md`
- **Alignment Auditor**: `alignment-agent.md`

---

## 1. Operating Architecture

### 1.1 Human as Director, AI as Orchestrator
- **Human Director**: The user acts as the ultimate director, decision-maker, and bridge.
- **Orchestrator Agent**: The main chat agent does not directly claim to be all roles. Instead, it acts as the **Orchestrator/Coordinator**, reading the current state of the design and dispatching specialized sub-agents when the host provides them. If no subagent facility is available, run the same role prompts serially in the main session and keep each role's output clearly labeled to limit context pollution.

### 1.2 Sub-Agent Context Isolation & Invocation
To prevent "Context Pollution", the Orchestrator should use isolated specialized sub-agents (PM, GTM, UI, Architect, Alignment) when available, and otherwise execute those roles serially.
- **Strict Calling Protocol**: Before invoking a role, the Orchestrator **MUST locate and read the corresponding prompt file in `../../runtime/codoop-flow/agents/`** using file tools:
  - PM Agent ➔ Read `../../runtime/codoop-flow/agents/product-sprint-prioritizer.md`
  - GTM Agent ➔ Read `../../runtime/codoop-flow/agents/sales-offer-lead-gen-strategist.md`
  - UI Agent ➔ Read `../../runtime/codoop-flow/agents/design-ui-designer.md`
    - **Discovery UI scope (overrides shared deliverables):** Create only `interface/design-system.md` as defined in §5. Do not create a mockup/prototype document or include implementation details.
  - Architect Agent ➔ Always read `../../runtime/codoop-flow/agents/engineering-software-architect.md`; read `engineering-backend-architect.md` only when `backend` appears in `project_paths`.
  - Alignment Agent ➔ Read `../../runtime/codoop-flow/agents/alignment-agent.md`
    - **Discovery alignment scope (overrides shared checklist):** Do not require `ui-mockups.md`. Audit `interface/design-system.md` against the product's audience, brand position, user journeys, primary actions, entitlement states, and visual-only boundary.
- **Invoke Role**: After reading, pass the exact file contents of the selected agent markdown as the persona/system context for that role. Use Codex multi-agent tools, Claude Code Task, or another host-native subagent mechanism when available; otherwise run the role serially in this session and require an explicit role verdict.

---

## 2. Bundled Dependencies

Keep this workflow self-contained. Load only skills and Runtime personas bundled
with this plugin; do not require separately installed external skills.

---

## 3. Core Disciplines

### 3.1 Strict Non-Assumption Principle (SNAP)
- **Rule**: Never make assumptions about business logic, pricing tiers, tech stack choices, platform ranges, layout configurations, or feature boundaries.
- **Action**: If any requirement is missing, ambiguous, or lacks evidence, you MUST halt and present options to the user.

### 3.2 Structured Querying Protocol
When querying the user, do not throw wide open-ended questions. Analyze the issue and provide 2-3 specific alternatives with clear pros and cons, along with your recommended approach.
Use this format:

```markdown
> [AGENT INQUIRY]: <Clear description of the ambiguity or decision point>
> 
> - **Option A (Option A)**: <Specific details of Option A> [Pros / Cons / Cost / Risk]
> - **Option B (Option B)**: <Specific details of Option B> [Pros / Cons / Cost / Risk]
> - **Recommendation (Recommendation)**: <Your recommended option> because <professional reasoning>.
```

### 3.3 Grilling Discovery Intake(冷启动引导)
每次 Discovery 都必须从 `grilling` skill 开始:在创建 `docs/backlog/design-draft.md` 或分派任何角色之前,先加载 `grilling`,再阅读 [`references/discovery-intake.md`](references/discovery-intake.md),并按其中的覆盖范围建立已确认的 Discovery Brief。

- 先从用户提供的资料、现有代码和项目文档中查证事实;可查证的事实不要再问用户。
- 每次只问 **一个** 尚未解决、会影响后续决策的问题;给出 2–3 个白话选项和推荐答案,然后等待用户回答。不要把题库一次性作为问卷发出,也不要重复已确认的信息。
- 沿着产品目标、用户、核心流程、范围、视觉方向和相关约束的决策树逐项追问。只有用户能决定的取舍才交给用户;技术实现细节由编排者根据项目证据处理。
- 收集到足够信息后,先输出简短的 **Discovery Brief**,至少包含:产品定位、目标用户与场景、第一版核心流程与范围、视觉方向、已知约束与待决问题。用户确认或修正该 Brief 前,不得创建设计文档或分派角色。
- 若用户拒绝回答关键问题,记录为“待决”,给出推荐假设并要求确认;不得悄然当作既定事实。

---

## 4. Multi-Role Collaboration Framework

The core responsibilities, tool integrations, and detailed capabilities of each specialized role are single-sourced in their respective agent configuration files. The Orchestrator should reference these files:

- **Product Manager (PM)**: Defines product scopes, opportunity trees (OST), user journeys, and Gherkin BDD user stories. Detailed in [`../../runtime/codoop-flow/agents/product-sprint-prioritizer.md`](../../runtime/codoop-flow/agents/product-sprint-prioritizer.md).
- **Go-To-Market (GTM)**: Formulates subscription structures, free/paid tier boundaries, price elasticities, and GTM plans. Detailed in [`../../runtime/codoop-flow/agents/sales-offer-lead-gen-strategist.md`](../../runtime/codoop-flow/agents/sales-offer-lead-gen-strategist.md).
- **UI Designer**: Creates the visual design system: visual direction, design principles, tokens, component language, page composition rules, motion, and visual accessibility. It does not define implementation details. Detailed in [`../../runtime/codoop-flow/agents/design-ui-designer.md`](../../runtime/codoop-flow/agents/design-ui-designer.md).
- **System Architect**: Designs configured projects and their external boundaries. For a client-only repository, record the API behavior the client needs without designing backend implementation. Detailed in [`../../runtime/codoop-flow/agents/engineering-software-architect.md`](../../runtime/codoop-flow/agents/engineering-software-architect.md); add the backend persona only when `backend` is configured.
- **Consistency Auditor (Alignment)**: Reads all specifications, cross-references them to identify inconsistencies, and feeds them back to PM, GTM, UI Designer, and Architect. Detailed in [`../../runtime/codoop-flow/agents/alignment-agent.md`](../../runtime/codoop-flow/agents/alignment-agent.md).

---

## 5. Decentralized Document-Driven Workflow

Follow this lifecycle for design packaging:

```text
Drafting & Objections             Hardening & Specifications             Alignment Audit & Lock            Development
┌─────────────────────────┐      ┌───────────────────────────┐      ┌───────────────────────────┐      ┌────────────────┐
│ docs/backlog/           │      │ docs/backlog/             │      │ alignment-report.md       │      │ Actual coding  │
│ design-draft.md         ├─────►│ requirements.md, etc.     ├─────►│ [ALIGNMENT APPROVED]      ├─────►│ configured    │
│                         │      │                           │      │                           │      │ project paths │
│ [CHALLENGE] [RESOLVED]  │      │                           │      │ [WAITING FOR HUMAN REVIEW]│      │                │
└─────────────────────────┘      └───────────────────────────┘      └───────────────────────────┘      └────────────────┘
```

1. **Shared Design Draft**: Create a temporary file `docs/backlog/design-draft.md` as the shared room for collaborative drafting.
2. **Review & Objections (The Challenge Loop)**:
   - Raise objections using: `[CHALLENGE: <Role A> -> <Role B>] <Objection details>`
   - Resolve them using: `[RESOLVED: <Role>] <Resolution/compromise details>`
   - Sign off when consensus is reached: `[APPROVED: <Role>]`
3. **Reactive Human Intercept (`[HUMAN DIRECTIVE]`)**:
   - The user can intervene at any time by placing a `[HUMAN DIRECTIVE]` block directly in `design-draft.md`.
   - Sub-agents must read this block on launch and unconditionally obey the directive, adjusting their designs.
4. **Structured Specifications**: Start `interface/design-system.md` from `templates/design-system.md`, preserving its required headings and table columns. Replace every placeholder with product-specific content, remove inapplicable optional sections, and do not leave template text or placeholders in a locked document. Draft the remaining documents directly. Hard-lock the final design into structured spec files organized under five clear subdirectories under `docs/backlog/` (strictly avoiding flat root-level file accumulation, and not generating any `specs/` directory):
   - **`product/`** (Product & Monetization):
     - `requirements.md`: Standard Product Requirement Document (PRD) containing scope, state transitions, and Gherkin BDD scenarios.
     - `user-journey.md`: Complete user journeys and user/job stories.
     - `monetization-plan.md`: Subscription structures, free/paid tier boundaries, and entitlement configurations.
   - **`interface/`** (Visual Design):
     - `design-system.md`: The sole visual-design source of truth. It defines visual direction, principles, colors, typography, spacing, component language, page composition rules, motion, and visual accessibility. It must not contain ASCII mockups, implementation code, technical architecture, API/schema details, or framework-specific guidance.
   - **`architecture/`** (Technical Design & Contracts):
     - `architecture.md`: Technical design for configured projects and their external boundaries.
     - `database-schema.sql`: Generate only when `backend` is configured and owns a database.
     - `openapi.yaml`: Generate only when `backend` is configured. Client-only projects record required external API behavior in `architecture.md`.
   - **`modules/`** (Module-Level Detailed Design):
     - `module-<name>.md`: Modular Gherkin BDD specifications containing Given-When-Then test cases for each functional unit.
   - **`bridge/`** (Human-AI Collaboration Bridge):
     - `human-preparation.md` (Human Preparation Checklist): A non-technical checklist of administrative and platform-specific tasks that a human must perform (e.g., registering developer accounts, obtaining API keys/credentials, registering domains, setting up payment gateways). This document must be dynamically and precisely tailored based on the application's specific design. If the application has no external platform dependencies, it should explicitly state that no preparation is needed.
     - `ai-co-dev-guide.md` (AI Co-Development Guide): A non-technical roadmap guiding the human user on how to continue AI-driven development. It explains the role of each generated specification document, outlines a logical step-by-step coding sequence, and suggests general AI collaboration principles (e.g., how to feed specifications to an AI coding assistant). It must NOT mention specific AI tool brands (such as Cursor, Claude Code, etc.) and must NOT contain concrete prompt templates.
     - `scaffolding-blueprint.md` (Scaffolding Blueprint): Preserve the configured project paths, including custom existing names. Never add an unconfigured backend or platform directory.

5. **Consistency Audit & Alignment Loop**:
   - After structured specifications are generated, the Orchestrator MUST invoke the **Alignment Agent** (reading `../../runtime/codoop-flow/agents/alignment-agent.md`) to conduct a comprehensive consistency audit across all generated files.
   - The Alignment Agent reads all specification files across the five directories, generates `docs/backlog/alignment-report.md`, and writes any identified inconsistencies into `docs/backlog/design-draft.md` under `[ALIGNMENT CHALLENGE]` blocks:
     `[ALIGNMENT CHALLENGE: Alignment -> <Role(s)>] <Description of conflict>`
   - The corresponding roles (PM, GTM, UI Designer, Architect) must be re-dispatched to resolve these challenges, updating their respective files and writing `[RESOLVED: <Role>]` in `design-draft.md`.
   - The Alignment Agent is re-dispatched to verify the updates. Once 100% aligned, the Alignment Agent appends `[ALIGNMENT APPROVED: Alignment]` to `design-draft.md`.
6. **Final Lock-In**: PM appends **`[WAITING FOR HUMAN REVIEW]`** at the end of `design-draft.md` only after receiving the `[ALIGNMENT APPROVED: Alignment]` sign-off.
7. **Archiving & Purge (Cleanup)**: Once the user approves and marks it as `Locked`, **Architect Agent** is responsible for verifying that all specifications are intact, and then **deleting the temporary `design-draft.md`** to keep the codebase clean.

---

## 6. BDD Gherkin Writing Template

When writing module specifications, capture edge cases and core paths using Gherkin:

```gherkin
Feature: <Feature title>

  Scenario: <Context description>
    Given <Prerequisites or initial state>
    When <Action or event triggers>
    Then <Outcome or expected result>
    And <Additional outcome details>
```

---

## 7. Lightweight Beta-Ready Definition of Done

To ensure that the first internal testing version (Alpha/Beta) of any application provides a highly complete user experience while avoiding administrative, certificate, or high operational bottlenecks, this loop establishes the following generic "Lightweight Beta-Ready Definition of Done" (BR-DoD). These requirements are applied conditionally based on the application's specific design:

### 7.1 UX Wiring Over Console Logs (Always Applicable)
- **Core Principle**: Any system state, asynchronous operation, or background task must have a corresponding user-facing UI representation. Silent failures or console-only errors are strictly forbidden.
- **Hard Design Requirements**:
  - **State Feedback**: All asynchronous requests must design explicit Loading states (e.g., Spinners, skeleton screens, or progress bars) to prevent duplicate clicks and user confusion.
  - **Exception Handling**: Network failures, API errors, or permission denials must be gracefully presented to users via Toast notifications, inline banners, or Modals.
  - **Settings Panel**: If the application has user-configurable settings, a user-accessible Settings Panel UI must be designed and mounted to allow testers to modify core configurations or basic parameters directly, rather than forcing them to manually edit local JSON/YAML/ENV configuration files.

### 7.2 Credential Persistence & Session Recovery (Conditional)
- **Applicability**: Only applicable if the product design involves user accounts, authentication, or cloud data synchronization.
- **Core Principle**: Internal testers should not have to log in repeatedly every time they open the application, nor should they rely on developers manually seeding the database.
- **Hard Design Requirements**:
  - A standard registration, login, or robust mock authentication flow must be designed.
  - Session persistence and automatic recovery/token refresh on cold start must be implemented, allowing users to automatically enter the main interface after logging in once.
  - **Always Applicable**: Automated database seeding or initialization mechanisms must be provided to eliminate any dependency on manual database operations for basic testing.

### 7.3 External Services & Sandbox Completeness (Conditional)
- **Applicability**: Only applicable if the product design integrates with external third-party services (such as payments, transactional emails, SMS, OAuth, or external APIs).
- **Core Principle**: All services involving external platform integrations or premium privileges must achieve 100% functional completeness under a "sandbox/test mode".
- **Hard Design Requirements**:
  - **Sandbox-Complete**: All external integrations must support a complete sandbox/mock mode for 100% functional completeness without production credentials.
  - **Payment Sandbox (If payments are designed)**: Must integrate with payment gateway test modes (e.g., test cards, sandbox accounts). When a user purchases, the system must automatically upgrade their account (e.g., via mock/test Webhooks) and unlock premium features client-side immediately.
  - **Notification Fallback (If emails/SMS are designed)**: Notification services must support a dual-track mode: send real messages if API credentials are provided, otherwise log them to the server console and proceed automatically, ensuring testing is never blocked.

### 7.4 Frictionless Distribution (Conditional)
- **Applicability**: Applied conditionally based on the target platform (Desktop, Web, Mobile, or CLI).
- **Core Principle**: Avoid wasting development time on official code signing certificates or complex deployment pipelines, providing the fastest path to testing.
- **Hard Design Requirements**:
  - **Unsigned/Development Packaging (For Desktop/Mobile/CLI)**: Provide automated build/packaging scripts (e.g., producing unsigned binaries, zip archives, or local installers). In the distribution documentation, include clear instructions on how testers can bypass operating system security warnings (e.g., macOS "App is damaged" or Windows SmartScreen).
  - **Single-Machine Deployment (For Web/Backend)**: Backends or web servers must provide one-click containerized deployment scripts (e.g., `docker-compose.yml`) or simple configurations for PaaS platforms, avoiding complex multi-node clusters or CDN setups.

---

## 8. Output Language Rule
- **Rule**: Follow the configured output language from **Project Paths** for all prose and generated documents. Preserve the bundled visual-design template structure while translating its Chinese headings and labels when needed.

Files in this skill

  • README.md6.6 KB
  • SKILL.md20.6 KB
  • references/discovery-intake.md3.8 KB
  • templates/design-system.md3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.