Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

2 Research

ASecurity

Phase 2 — Parallel research across 6 dimensions. Outputs: project_plans/<project>/research/*.md

8 stars
0 votes
0 copies
0 views
Added 9/20/2026
designgoapi

Works with

cliapi

Security Analysis

A100/100

Scanned 9/20/2026

Install to Claude Code

$npx -y skills add tstapler/dotfiles --skill 2-research --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 2 Research?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for 2 Research
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tstapler-2-research-dotfiles/badge)](https://www.skillsdirectory.com/skills/tstapler-2-research-dotfiles)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
description: "Phase 2 — Parallel research across 6 dimensions. Outputs: project_plans/<project>/research/*.md"
user-invocable: true
allowed-tools: Read, Write, Task, AskUserQuestion
---

# sdd:2-research

Spawn 6 parallel subagents to research the problem — covering stack, features, architecture, pitfalls, UX, and build-vs-buy. All research happens in subagents — the coordinator (this thread) only reads summaries back, keeping context clean for implementation.

## Instructions

1. **Follow [SETUP.md](../skills/SETUP.md)** — identify PROJECT_NAME.

2. **Read `project_plans/<PROJECT_NAME>/requirements.md`.** Halt if missing — run `/sdd:1-ideate` first.

2.5. **Calibrate research depth from the Complexity field in requirements.md**:
   - **Complexity 1** (quick task): run Agents 1, 4, 6 only (stack, pitfalls, build-vs-buy). Skip agents 2, 3, 5 unless requirements mention edge cases, architecture, or UX.
   - **Complexity 2–3** (feature / system design): run all 6 agents.
   - **Complexity 4** (high-stakes): run all 6 agents. In Agent 3's prompt, add: "Separately evaluate failure modes specific to the migration or compliance aspect."
   - If no Complexity field found in requirements.md: treat as Complexity 2 (Agents 1, 4, 6 always; add 2, 3, 5 only if requirements mention edge cases, architecture, or UX).

2.75. **Check for existing hotspot/architecture analysis before dispatching Agent 3.** Don't
   re-derive this yourself — delegate to the skills that own it:
   - Invoke the **`code-hotspot-analysis`** skill (or check whether it's already been run) to see
     if the file(s)/module(s) named in `requirements.md` are a known complexity×churn hotspot.
   - Invoke the **`quality:architecture-review`** skill (or check whether it's already been run,
     targeted at the same area) for any prior SOLID/Clean Architecture/DDD findings.
   - Also check `project_plans/*/research/architecture.md` from an earlier SDD run for an
     overlapping file/module.

   Let those skills' own conventions determine where their output lives and what it contains —
   don't hardcode file-naming assumptions here, since that drifts out of sync with the skills.
   If prior analysis is found, note its location and a one-line summary of its relevant findings
   — this gets handed to Agent 3 below instead of having it re-derive the same analysis from
   scratch. If nothing exists yet and this is a Complexity 3-4 feature touching a large or
   legacy area, consider running `code-hotspot-analysis` now rather than skipping straight to
   Agent 3's inline research. If nothing applies, proceed as normal — this step is a cheap check,
   not a blocker.

3. **Dispatch research agents in parallel using the `Task` tool** (all 6 in a single message — do not run sequentially):

   Each agent prompt must include:
   - The full text of `requirements.md`
   - Its specific research question (below)
   - An instruction to **write its output directly to the target file** and return a 3-bullet summary
   - This codebase exploration guidance: **When exploring the existing codebase, use context-efficient techniques: `Glob` for finding files by pattern, `sg --pattern '<pattern>' --lang <lang>` (ast-grep) for structural code searches (function signatures, type definitions, call sites — prefer `sg` over grep for code), `Grep` for text patterns in configs/docs, and `Read` with targeted line ranges. Do not read entire files. Orient in ≤5 tool calls.**

   **Agent 1 — Stack** → writes `project_plans/<PROJECT_NAME>/research/stack.md`:
   > Research the technology stack for this feature. Which specific libraries, frameworks, versions, and patterns apply? What dependencies will be needed? What are the current community-recommended versions? Write your findings to `project_plans/<PROJECT_NAME>/research/stack.md`, then return a 3-bullet summary.

   **Agent 2 — Features** → writes `project_plans/<PROJECT_NAME>/research/features.md`:
   > Research the feature landscape for this requirement. What similar features exist in the codebase or industry? What edge cases and failure modes should the design handle? What are users' unstated needs beyond the explicit requirements? Write your findings to `project_plans/<PROJECT_NAME>/research/features.md`, then return a 3-bullet summary.

   **Agent 3 — Architecture** → writes `project_plans/<PROJECT_NAME>/research/architecture.md`:
   > Research the architecture approach. What architectural patterns apply to this type of problem? What are the integration points with existing systems? What are the data flow and consistency requirements?
   >
   > If step 2.75 above found an existing hotspot/architecture analysis covering this area, its path is: `<path from step 2.75, or "none found">`. Read it first and build on it explicitly — cite its findings by file:line where relevant instead of re-deriving them, and focus your own research on filling gaps it didn't cover (e.g. it may have flagged *that* a class is a God Object without researching *how* this specific requirement should be layered around it). Do not silently ignore it and produce a parallel, disconnected analysis.
   >
   > **If the touched area is a known hotspot or already violates SOLID/Clean/DDD boundaries** (per the analysis above, or your own read of the code): recommend a disposition Phase 3 must formalize — **Refactor-first** (fix the violation as part of this work), **Isolate via seam** (wrap it behind an adapter/facade so new code stays clean even though the legacy code inside doesn't), or **Extend as-is** (touched area is stable and this change doesn't deepen the existing violation). State which one and why in one or two sentences — this becomes an input to plan.md's Tech Debt Disposition section.
   >
   > **If the requirements describe a complex business domain involving multiple actors, systems, or business rules** (not simple CRUD): produce an Event-Command-Policy table using EventStorming grammar. This surfaces bounded context boundaries and business rules before planning begins:
   >
   > | Domain Event (what happened) | Policy trigger (whenever X, then…) | Command (intent to change state) | Actor / System |
   > |---|---|---|---|
   > | `<Noun> <Past-tense verb>` | `Whenever <event>, then <command>` | `<Verb> <Noun>` | `<User role / Service name>` |
   >
   > Skip this table for simple CRUD features with no multi-step business logic.
   >
   > Write your findings to `project_plans/<PROJECT_NAME>/research/architecture.md`, then return a 3-bullet summary.

   **Agent 4 — Pitfalls** → writes `project_plans/<PROJECT_NAME>/research/pitfalls.md`:
   > Research known pitfalls and risks for this type of feature. What commonly goes wrong? What are the risks in the chosen stack? What should be explicitly designed against? Write your findings to `project_plans/<PROJECT_NAME>/research/pitfalls.md`, then return a 3-bullet summary.

   **Agent 5 — UX Research** → writes `project_plans/<PROJECT_NAME>/research/ux.md`:
   > Research the user experience for this feature. Cover: (1) comparable UX patterns in similar products — what interaction flows work well and why; (2) user mental models and expectations for this type of feature; (3) accessibility requirements (WCAG, ARIA, keyboard navigation) that apply; (4) error states and edge cases that must have graceful UX handling; (5) the job-to-be-done lens — what functional, emotional, and social jobs does this feature fulfill for the user? Skip if this feature has no user-facing surface (pure infrastructure). Write your findings to `project_plans/<PROJECT_NAME>/research/ux.md`, then return a 3-bullet summary.

   **Agent 6 — Build vs. Buy** → writes `project_plans/<PROJECT_NAME>/research/build-vs-buy.md`:
   > Research whether this feature should be built from scratch or sourced from an existing solution. Evaluate each option below and recommend the best approach with rationale:
   > 1. **Existing OSS library or framework** — what packages exist that solve all or part of this? Assess: maturity, maintenance, license, fit to requirements, and what would need custom wrapping.
   > 2. **SaaS / managed API** — does a hosted service already do this? Assess: cost, data residency, vendor lock-in, and integration complexity.
   > 3. **LLM-generated implementation vs. battle-tested library** — for any algorithm or data structure involved: compare the correctness risk of a bespoke LLM-generated implementation against adopting a widely-used, tested library. When is custom code worth the maintenance burden? When is it reckless?
   > 4. **Fork or adapt** — is there an existing implementation close enough to fork or adapt rather than build from scratch?
   > For each option: Pros / Cons / Verdict (Recommended / Viable / Not recommended).
   > Write your findings to `project_plans/<PROJECT_NAME>/research/build-vs-buy.md`, then return a 3-bullet summary.

4. **Wait for all agents to complete.** Do not summarise until all have returned.

4.5. **Open question resolution gate.** Check requirements.md → `## Open Questions`:
   - For each question, scan the research files to see if any agent answered it.
   - If all open questions are answered: proceed to synthesis.
   - If any remain unanswered, ask the user via `AskUserQuestion`:
     ```
     header: "Open questions"
     question: "The following questions from requirements.md were not resolved by research: <list>. How would you like to proceed?"
     options:
       - "Accept the uncertainty — add to plan.md Unresolved Questions and continue"
       - "I'll answer one now (click Other)"
       - "Halt — research these further before planning"
     ```
   - If user proceeds with open questions: add them to requirements.md under `## Open Questions` with a note `*(unresolved after Phase 2 research)*`.

5. **Synthesise** the 6 agent summaries (do not re-read the full files — use the summaries they returned):
   ```
   ✅ Phase 2 complete — research written to project_plans/<PROJECT_NAME>/research/

   Key findings:
   - Stack: <1-line summary>
   - Architecture: <1-line summary>
   - Features: <1-line summary of edge cases, unstated needs, or comparable implementations found>
   - UX: <1-line summary, or "N/A — no user-facing surface">
   - Build vs. Buy recommendation: <1-line: build / adopt <library> / use <SaaS>>
   - Top risk: <1 pitfall to watch>
   - Prior analysis incorporated: <path, or "none found">

   Next step: /sdd:3-plan
   ```

Attribution

tstaplertstapler
View sourceMore from tstapler →
SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Related Skills

Responsive Design

Implement modern responsive layouts using container queries, fluid typography, CSS Grid, and mobile-first breakpoint strategies. Use when building adaptive interfaces, implementing fluid layouts, or creating component-level responsive behavior.

393432 votes

Mermaid Diagrams

Creating and refining Mermaid diagrams with live reload. Use when users want flowcharts, sequence diagrams, class diagrams, ER diagrams, state diagrams, or any other Mermaid visualization. Provides best practices for syntax, styling, and the iterative workflow using mermaid_preview and mermaid_save tools.

2032 votes

sleek-design-mobile-apps

Use when the user wants to design a mobile app, create screens, build UI, or interact with their Sleek projects. Covers high-level requests ("design an app that does X") and specific ones ("list my projects", "create a new project", "screenshot that screen").

5711 votes

swiftui-design-skill

SwiftUI frontend visual design skill. Creates beautiful, distinctive iOS/macOS interfaces that avoid generic AI slop patterns. Covers design direction, layout systems, typography, color, spacing, brand integration, and design review. Use when designing new SwiftUI views, reviewing UI quality, creating iOS prototypes, choosing visual styles, improving app aesthetics, or when the UI looks generic or AI-generated.

1801 votes

Ios Hig

Use when designing iOS interfaces, implementing accessibility (VoiceOver, Dynamic Type), handling dark mode, ensuring adequate touch targets, providing animation/haptic feedback, or requesting user permissions. Apple Human Interface Guidelines for iOS compliance.

761 votes
View all in design →