Install
$ agentstack add skill-danmcinerney-shotgun-research-skill-shotgun-research-skill ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Shotgun
Run read-only, parallel "ask the other coding agents" research. The goal is breadth first: collect independent answers from installed CLI coding tools, summarize each briefly, then merge their strongest evidence and disagreements into one report.
Workflow
- Restate the user's request as an optimized agentic research prompt.
- Preserve the user's intent and constraints.
- Ask each tool to stay read-only unless the user explicitly requested edits.
- Ask for concise, structured output with: answer, evidence, uncertainty, recommended next checks, and sources or file references when available.
- Tell tools that support delegation/subagents to fan out internally when useful, but to return only a concise final.
- Run the bundled fan-out runner:
python C:\Users\danhm\.codex\skills\shotgun\scripts\shotgun.py --prompt "..." --cwd ""
If python is unavailable, use any available Python runtime. The runner has no third-party dependencies. Prefer --prompt-file for long prompts. The default per-tool timeout is intentionally lax: 7200 seconds. For unusually deep research, pass a larger --timeout and ensure the invoking shell/tool timeout is larger than the runner timeout.
- Inspect the generated run directory.
summary.mdlists detected tools, command status, and output files.outputs/*.txtcontains each tool's captured answer.metadata.jsonrecords exact adapters, exit codes, and durations.
- Produce the final answer in three layers:
- Per-tool scorecards: for every detected tool, summarize the good and bad. For successful tools, name the strongest useful contribution and the main weakness, blind spot, or questionable claim. For failed, empty, or timed-out tools, state the status and useful diagnostic from
summary.md/metadata.json. - Consensus and disagreements: what multiple tools agreed on, what only one tool noticed, and which claims are uncertain.
- Comprehensive report: the best merged answer, with local file references or web citations if the tools supplied them and they are credible.
Safety
- Default to research-only execution. Do not let downstream tools modify files unless the user explicitly asks for implementation.
- Do not pass secrets or private credentials into the prompt. Redact tokens, API keys, customer data, and unrelated personal data.
- If a tool is installed but only exposes an interactive TUI, record it as unavailable for headless shotgun rather than launching a hanging session.
- If the runner reports an installed unsupported tool, inspect
--helpand the latest docs before adding a manual invocation. - Keep timeouts finite but generous. A slow or silent tool should be reported as timed out, not allowed to block the whole shotgun pass indefinitely.
Prompt Template
Use this shape when creating the prompt sent to each CLI:
You are one agent in a shotgun research pass. Work independently.
Research request:
Context:
- Current working directory:
- Treat this as read-only research unless explicitly told otherwise.
- If your CLI supports subagents, delegation, or parallel internal research, use it when it improves coverage.
Output:
1. Direct answer or conclusion.
2. Key evidence, with file paths, commands, URLs, or sources when available.
3. Important caveats or uncertainty.
4. Best next checks.
Keep the final concise and information-dense. Do not edit files.
Tool Matrix
The runner's first-pass adapters are documented in [references/cli-tools.md](references/cli-tools.md). Update that reference and scripts/shotgun.py together when adding or correcting a CLI adapter.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: DanMcInerney
- Source: DanMcInerney/shotgun-research-skill
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.