skills/gap-analysis/SKILL.md
MANDATORY validation. You MUST invoke this skill before presenting any design, plan, architecture decision, or significant recommendation as final. Runs 7 cognitive debiasing checks: inversion, second-order effects, MECE coverage, map vs territory, adversarial, simplicity, and reversibility. Do NOT present conclusions without running all 7 checks. Invoke after brainstorming produces a design, after a plan is drafted, before any irreversible action, or when asked to validate or review an approach.
npx skillsauth add xD4O/praxis gap-analysisInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
EXTREMELY_IMPORTANT: This is a MANDATORY protocol, not a suggestion. Follow every step. Do not skip steps. Do not combine steps. Do not summarize. Work through each gate in order.
You have produced a design, plan, or recommendation. Before presenting it as final, you MUST run all 7 checks below. Do not skip any. Report each result explicitly.
Ask: "How would I guarantee this fails?"
List 3 specific failure modes. For each, verify your solution prevents it. If any failure mode is not prevented, flag it as an open risk.
Ask: "And then what?" three times.
If 2nd or 3rd order effects are negative, state whether they're acceptable or require design changes.
Ask: "Have I covered the entire problem space with no gaps and no overlaps?"
List the dimensions you've addressed. Identify any dimension you haven't addressed. Gaps are where surprises live.
Ask: "Where does my model diverge from reality?"
List 3 things you simplified, assumed, or ignored. For each, state the risk if reality differs from your model.
Ask: "How would a hostile actor exploit this? How would a careless user break this?"
Identify the weakest point. State whether it's acceptable or needs hardening.
Ask: "Is there a simpler solution I'm overlooking?"
If yes, state why you chose the more complex approach. The justification must be concrete, not "it might be needed later" (that's YAGNI violation).
Ask: "Is this decision reversible?"
After completing all 7 checks, summarize:
GAP ANALYSIS COMPLETE
├── Inversion: [X/3 failure modes mitigated] [open risks if any]
├── Second-order: [acceptable / requires changes]
├── MECE: [complete / gap in: ___]
├── Map vs territory: [top risk: ___]
├── Adversarial: [weakest point: ___]
├── Simplicity: [simplest viable / justified complexity]
├── Reversibility: [Type 1 / Type 2]
└── Confidence: [HIGH / MEDIUM / LOW / INSUFFICIENT]
<HARD-GATE>
Do NOT present a design, plan, or recommendation as final until all 7 checks
are complete and reported. If any check reveals a critical issue (unmitigated
failure mode, negative 2nd-order effect, MECE gap, or Type 1 decision with
LOW confidence), you MUST address it before proceeding.
Rationalizations that skip checks:
After all 7 checks pass and the design is validated:
If Superpowers is installed → invoke Skill(superpowers:writing-plans) to create the
implementation plan. Pass the validated design and any issues flagged during gap analysis.
Do NOT write the plan inside PRAXIS. PRAXIS validated. Superpowers plans.
If Superpowers is NOT installed → proceed to implementation planning yourself.
development
MANDATORY — HIGHEST PRIORITY SKILL. You MUST invoke this skill (praxis) BEFORE invoking superpowers:brainstorming or ANY other skill when the task is non-trivial. This skill classifies the problem, selects reasoning frameworks, and runs threat analysis BEFORE brainstorming begins. Do NOT invoke superpowers:brainstorming first. Do NOT respond directly. Do NOT ask clarifying questions on your own. Invoke praxis FIRST, complete its gates, THEN hand off to superpowers:brainstorming. Non-trivial means: system design, feature planning, architecture decisions, debugging, security-sensitive code, trade-off evaluation, code review, or refactoring. Trivial means: fix a typo, rename a variable, answer a factual question, run a command.
development
MANDATORY strategic analysis. You MUST invoke this skill for business decisions, product strategy, competitive analysis, roadmap prioritization, or any decision about WHAT to build rather than HOW to build it. Do NOT skip SWOT analysis. Do NOT present strategy without measurable OKRs. Invoke when the problem is about direction, positioning, or priorities rather than implementation.
development
MANDATORY threat analysis. You MUST invoke this skill before writing or approving ANY code involving authentication, authorization, cryptography, input handling, payment processing, PII, secrets management, API endpoints, or trust boundaries. Do NOT write security-sensitive code without running STRIDE analysis first. Do NOT say you will add security later. Auth is a design decision, not a feature to bolt on.
development
MANDATORY first step. You MUST invoke this skill before brainstorming, designing, or planning any non-trivial work. Do NOT start asking clarifying questions on your own — this skill's gates ARE the clarifying questions. Invoke when the user asks to build, design, plan, create, architect, or implement anything substantial. Do NOT skip this because the task seems straightforward. Straightforward-seeming tasks with wrong framing produce the most expensive failures.