Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Review Assumption

ASecurity

Review an assumption record for specificity, basis quality, risk assessment, and validation plan adequacy.

10 stars
0 votes
0 copies
0 views
Added 10/6/2026
documentationgo

Works with

terminal

Security Analysis

A100/100

Scanned 10/6/2026

$npx -y skills add tomzx/agents --skill review-assumption --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Review Assumption?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Review Assumption
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tomzx-review-assumption/badge)](https://www.skillsdirectory.com/skills/tomzx-review-assumption)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: review-assumption
description: Review an assumption record for specificity, basis quality, risk assessment, and validation plan adequacy.
argument-hint: "[assumption document or file path]"
---

# Review Assumption

Audits an assumption record and reports findings across four categories: specificity, basis quality, risk assessment, and validation plan adequacy.

## Prerequisites

- Apply the shared SDLC conventions in `skills/sdlc/references/shared.md`.
- `.sdlc/knowledge/assumptions/N-<slug>.md`, or an assumption document provided in context or as a file path

## Steps

1. Read the assumption document.
2. Evaluate it against the checklist below.
3. Report findings by category. Omit categories with no findings.
4. After the review, update `status` in frontmatter to the appropriate terminal value: `Validated` (assumption confirmed), `Invalidated` (assumption disproved — flag affected work), or `Deferred` (cannot yet be verified).

## Review Checklist

### Specificity
- Is the assumption statement specific enough to be falsifiable?
- Does it name concrete scope (which users, which load, which environment)?
- Is the status field present and accurate?

### Basis Quality
- Is there stated evidence or reasoning supporting the assumption?
- Is the confidence level consistent with the quality of the basis?
- If the basis is weak or absent, is that acknowledged rather than hidden?

### Risk Assessment
- Is the impact level (High / Medium / Low) justified by the description?
- Does the risk description name specific components or flows that depend on the assumption?
- Are downstream assumptions or decisions that inherit this risk identified?

### Validation Plan
- Is a concrete validation method described (not just "we'll check later")?
- Is there a named owner responsible for validation?
- Is there a deadline or milestone tied to validation?
- If the assumption cannot be validated before implementation, is that risk acknowledged?

## Output Format

```markdown
## Specificity

<Findings or "No issues found.">

## Basis Quality

<Findings or "No issues found.">

## Risk Assessment

<Findings or "No issues found.">

## Validation Plan

<Findings or "No issues found.">
```

## Outcome

If `$OUTCOME_YAML` is set, emit your verdict there per `skills/sdlc/references/shared.md`:

| Verdict | When |
|---|---|
| `approved` | No blocking findings; the subject passes review |
| `changes-requested` | Findings the author must address before it passes |
| `rejected` | Fundamental flaw requiring rework or stopping |

In the same emission, list the record under `artifacts:` when the review changed it (for example a status transition or a recorded answer).

## Example Usage

**Scenario 1: Unfalsifiable statement**
Assumption says "the system will be fast enough." No metric, no context.
Report under Specificity: restate with a measurable threshold (e.g., "p99 latency under 300ms for search queries under normal load").

**Scenario 2: High confidence, weak basis**
Confidence is marked High but the basis is "we think this is probably true."
Report under Basis Quality: confidence should be Medium or Low, or the basis must be strengthened.

**Scenario 3: High impact, no dependencies named**
Impact is High but the description only says "things would break."
Report under Risk Assessment: name the specific components, decisions, or flows that depend on this assumption.

**Scenario 4: Validation with no owner or deadline**
Validation plan says "run a load test at some point."
Report under Validation Plan: assign an owner and a deadline or milestone.

Attribution

tomzxtomzx
View sourceSee grades on GitHubMore from tomzx →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Context Fundamentals

Understand the components, mechanics, and constraints of context in agent systems. Use when designing agent architectures, debugging context-related failures, or optimizing context usage.

179001 votes

Architecture Diagram Creator

Create comprehensive HTML architecture diagrams with data flows, business context, and system architecture.

6661 votes

release-notes

Draft release notes and changelog entries from git history or merged PRs between two refs (tags/SHAs/branches), including breaking changes, migrations, and upgrade steps. Use when the user asks for release notes, changelog updates, or a GitHub Release draft.

1301 votes

docs-style-guide

Documentation style guide enforcer by @planetabhi. Applies and reviews the writing style guide when authoring or editing product documentation and tutorials. Use to check prose for voice, tense, word choice, inclusive language, formatting, code block, UI, Markdown, and number/date conventions.

11 votes

Docx

Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from .docx or .dotx files, inserting or replacing images in documents, performing find-and-replace in W...

1798860 votes
View all in documentation →