Install
$ agentstack add skill-evolplus-talos-sa-architecture-design ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
SA Architecture Design
Use
Use this skill when SA is dispatched in design mode. Do not use for brownfield extraction or external-integration adequacy; those have separate skills.
Inputs
docs/SRS.mdatStatus: Signed-offdocs/user-stories/,docs/frs/,docs/external-integrations/- Existing
docs/architecture.mdanddocs/decisions/when revising - SRS headers
Designated Dependency Approver,Frontend-Framework,Backend-Track,Backend-Framework solution-defaults,third-party-dependency-evaluation,adr-author,c4-author,data-lifecycle-contracts,format-boundary-contracts
Outputs
docs/architecture.mdusingagents/_templates/_artifacts/architecture-template.md.- ADRs under
docs/decisions/for every non-trivial choice. docs/instrumentation-contract.mdfor any SRS with a UI surface.docs/open-issues.mdentries for architectural gaps that cannot be resolved from the SRS.- Worktree
plan-update.jsonwithtrack: "sa".
Procedure
- Verify SRS is signed off. Halt if not.
- Read the SRS, every linked US/FR, external integration files, and prior ADRs.
- Build C4 levels:
- C1 Context: system boundary, actors, external systems.
- C2 Containers: runnable/deployable units, datastores, queues, clients.
- C3 Components: required for non-trivial containers; each component row carries
Linked FRs. - Do not author C4 Code; Dev roles own code-level artifacts.
- Fill architecture sections:
- §3.5 Data Models when persistent state exists.
- §3.6 API Inventory for REST/gRPC/GraphQL/WebSocket/events/queues, linking contract files.
- §3.7 Dependency & Call Graph for cross-container calls, internal packages, and production dependencies.
- §3.8 Async Workflows for event/queue flows.
- Cross-cutting concerns, failure modes, NFR posture, open risks, and observability.
- Apply data-contract skills:
- Use
format-boundary-contractsfor fields crossing incompatible formats. - Use
data-lifecycle-contractsfor gate fields read by one component and written by another.
- For UI-bearing SRSs, author
docs/instrumentation-contract.mddeclaring stable test IDs/accessibility identifiers for FE Dev and QA. - For every non-trivial architectural choice, author an ADR.
- For new third-party dependencies:
- Check
solution-defaultsfirst. - Reuse prior ADR approvals when valid.
- Otherwise evaluate 2-4 options with
third-party-dependency-evaluation, halt withNEEDS_CONTEXT, and wait for the Designated Dependency Approver. - Do not include the dependency in accepted architecture until approval is recorded.
- Run a self-containment check on produced artifacts.
- Commit changes, then emit
plan-update.json.
Quality Bar
The architecture must let TL break down tasks and Devs implement without reverse-engineering intent. Every SRS requirement must have an architectural home, or a documented open issue.
Hard Rules
- Never propose architecture before SRS sign-off.
- Never write source code, tests, API contracts, or plan files.
- Never weaken SRS Security & Compliance.
- Never approve dependencies yourself.
- Never skip
docs/instrumentation-contract.mdfor UI-bearing SRSs. - Never omit architecture §6 when format-boundary or gate-field conditions are present.
- Commit before signaling done.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: evolplus
- Source: evolplus/talos
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.