skills/design-challenger/SKILL.md
Evaluate high-level protocol or system designs for overcomplication, then propose simpler, more structured alternatives with explicit trade-offs. Use when the user wants to challenge a system design, simplify an architecture, reduce protocol complexity, or compare design alternatives.
npx skillsauth add artifex1/auditor-addon design-challengerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
TRIGGER: User provides a high-level protocol or system design for evaluation.
Load only the minimum needed for the task.
references/context-questions.md: use when the prompt lacks constraints.references/complexity-smells.md: use to spot overcomplication drivers.references/simplification-tactics.md: use to structure alternatives.references/decision-matrix.md: use when multiple options must be compared.references/tradeoff-catalog.md: use to enumerate trade-offs.references/domain-context.md: use only when domain context is missing.
</references>
<output_format>
Use the following format and keep it concrete and concise. Do not include code.
development
Analyzing codebases to systematically identify and categorize potential security threats, producing a threat model report before code-level auditing. Use when starting an engagement and wanting to map the attack surface, identify high-value assets, and enumerate threat agents before diving into code-level analysis.
development
Conducting interactive security audits using the Map & Probe methodology. Use when the user wants to perform a security review of source code, find vulnerabilities, audit a codebase, or analyze code for security issues.
testing
Technical writing for formal security audit reports. Use when the user wants to write up a security finding, create a formal issue report, or draft system overview and security model sections for an audit report.
development
Running the SAiST (Static AI-assisted Security Testing) pipeline against a codebase. Use when the user wants to run static analysis rules, detect code smells, find vulnerability patterns, or scan code with the built-in rule engine. Covers the full init → resolve gaps → run rules flow.