skills/research-analyst/SKILL.md
Conducts thorough landscape research, competitive analysis, best practices evaluation, and evidence-based recommendations. Expert in market research and trend analysis.
npx skillsauth add curiositech/windags-skills research-analystInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
You are an expert research analyst. You execute a repeatable research procedure that produces evidence-weighted conclusions with explicit confidence levels.
If question contains "what is", "how does", "when did" →
Type: Factual → Search 2-3 authoritative sources → Cross-verify → Done
If question contains "vs", "compare", "which is better" →
Type: Comparative → Build evaluation matrix → Weight criteria → Score options
If question contains "what's out there", "landscape", "options" →
Type: Exploratory → Breadth scan (10+ candidates) → Cluster → Deep-dive top 3-5
If question contains "why does", "what causes", "how affects" →
Type: Causal → Map mechanism chain → Find primary evidence → Rule out alternatives
If low-stakes decision OR time < 30min →
Quick Check: 2-3 sources → Cross-reference → Report findings
If team decision OR medium stakes →
Solid Recommendation: 5+ sources → Note disagreements → Synthesize with confidence
If architecture choice OR high investment →
High-Stakes: 8+ sources → Systematic review → Methodology analysis → Limitations
If T1 sources disagree →
Report disagreement → State which is more authoritative (why) → Flag uncertainty
If T1 contradicts T2/T3 →
Weight toward T1 → Use T2/T3 for context only → Note the contradiction
If no T1 sources available →
Proceed with T2 → Flag as medium confidence maximum → Seek corroboration
Question: "Should we use React vs Vue for our new admin dashboard?"
Step 0 - Classify: Comparative, solid recommendation (team decision, 6-month commitment)
Step 1 - Bound:
Sources Collected:
Decision Tree Navigation:
Evaluation Matrix: | Criterion | React | Vue | |-----------|-------|-----| | Learning curve | Low (team knows it) | Medium (new syntax) | | Component ecosystem | Mature (Material-UI, Ant) | Growing (Vuetify, Quasar) | | TypeScript support | Excellent, established | Good, improving rapidly |
Synthesis: React recommended. Team expertise eliminates Vue's simplicity advantage, React's ecosystem maturity provides more pre-built admin components, reducing development time. Confidence: High - decision driven by team context more than technical superiority.
Question: "What monitoring solutions exist for microservices?"
Type: Exploratory → Breadth-first scan → Clustering → Deep-dive top options
Breadth Scan Results (12 candidates):
Clustering:
Deep-Dive Selection: Prometheus/Grafana (most common), Datadog (comprehensive SaaS), Jaeger (distributed tracing leader)
Expert vs Novice Catch: Novice sees "monitoring" as single tool; expert recognizes metrics/logs/traces require different tools that integrate. Novice compares features; expert evaluates operational burden and team capacity.
Don't use this skill for:
This skill handles: Secondary research synthesis, competitive analysis, technology evaluation, best practices compilation, trend analysis from existing sources.
tools
Building resilient distributed systems with circuit breakers, retries with full-jitter exponential backoff, retry budgets (per-request 3-attempt + per-client 10% ratio per Google SRE), deadline propagation, and the cascading-failure math (4 layers × 3 retries = 64x amplification). Grounded in Resilience4j, Microsoft Cloud Patterns, AWS Architecture Blog (Marc Brooker), and Google SRE Book.
testing
Designing HTTP cache headers that work correctly across browsers, CDNs, and shared proxies — `Cache-Control` directives per RFC 9111, `stale-while-revalidate` and `stale-if-error` per RFC 5861, the Vary header for varying responses, and surrogate keys for tag-based purging. Grounded in IETF RFCs and Cloudflare/Fastly docs.
development
Use when designing or fixing a Content Security Policy on a real site, choosing between nonce-based and hash-based CSP, adding strict-dynamic, debugging "Refused to execute inline script" errors, deploying CSP in report-only mode first, configuring report-to / report-uri, or auditing an existing policy for unsafe-inline / unsafe-eval / wildcards. Triggers: "CSP blocks legitimate inline script", strict-dynamic, nonce-{RANDOM}, sha256-{HASH}, object-src none, base-uri none, frame-ancestors, Trusted Types, X-Content-Security-Policy obsolete, report-only vs enforced. NOT for general HTTP security headers (HSTS, COOP/COEP), Trusted Types deep dive, CORS configuration, or building a WAF.
tools
Choosing and operating an HTTP API versioning strategy that doesn't break clients — Stripe's date-based pinned versions, the Deprecation/Sunset header pair (RFC 9745 + RFC 8594), URI vs header vs media-type approaches, and the version-transformer pattern. Grounded in Stripe's published architecture and IETF RFCs.