AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

H4tcher Capability Discover

skill-hatch3r-hatch3r-h4tcher-capability-discover · by hatch3r

Pre-flight read-only scan for a planned capability change — maps what exists, what would collide, and which pillar gap a new artifact would close.

No reviews yet
0 installs
29 views
0.0% view→install

Install

$ agentstack add skill-hatch3r-hatch3r-h4tcher-capability-discover

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-hatch3r-hatch3r-h4tcher-capability-discover)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of H4tcher Capability Discover? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

> Last updated: 2026-06-06

Capability Discover (Maintainer, Read-Only)

Investigative preset. Run first when scoping any add / refactor / remove. Produces a structured report; writes no files in the repo. Workspace files under .audit-workspace/ are allowed for T2/T3 sub-agent slices.

Step 0: Triage

Classify the request before any scan:

  • T1 — single artifact type in scope (e.g., "is there already an agent for X?"). Inline scan; skip Step 4.
  • T2 — 2-3 artifact types or one cross-reference dimension. 3 parallel sub-agents per Step 4.
  • T3 — multi-pillar surface (e.g., touches agents + adapters + governance). 3 parallel sub-agents per Step 4 plus pillar-gap analysis.

Record the tier in the Step 7 report header.

Step 1: Preflight

  1. Confirm clean working tree: git status --short returns empty.
  2. Cache governance lean limits from governance/CONSTITUTION.md §2 P5.
  3. Resolve target artifact type(s) from the prompt: agent, skill, rule, command, hook, adapter, pipeline module, governance file.
  4. Note current branch: git branch --show-current.

Step 2: Discover / Duplication Scan

  1. Read governance/inventory.json — extract counts and ids for each artifact directory.
  2. Grep across the canonical content surface for the target intent's keywords:

``bash grep -RIn --include='*.md' '\|' \ agents/ skills/ rules/ commands/ hooks/ \ checks/ prompts/ github-agents/ \ src/adapters/ src/content/ ``

  1. Cross-check candidates against the D16.3 overlap criteria in governance/audit/domains/D16-compound-system.md (definition + add-vs-remove bias check). Record each candidate's overlap dimension (purpose / scope / pillar / referenced files) and a rough percentage estimate.
  2. Count inbound cross-references for each candidate via grep -RIn "" across the same surface plus governance/, docs/, docs-site/, tests/, CLAUDE.md, README.md, CHANGELOG.md.

Step 3: Web Research

Per agents/shared/rigor-contract.md §"Web Research Mandate": ≥2 independent sources, trust tier (official-docs > peer-reviewed > vendor-note > independent-analysis > blog-post), recency window (≤90 days for CVE, ≤12 months for vendor docs, ≤36 months for peer-reviewed). Sources recorded in Step 7. Skip when no empirical claim is being investigated (most pure-overlap scans).

Step 4: Sub-Agent Dispatch (T2 / T3 only)

Spawn 3 parallel Task sub-agents. Slice the surface so file scopes are disjoint:

| Slot | Scope | Output | |------|-------|--------| | A | agents/, skills/ | .audit-workspace/capability-discover-a.md | | B | commands/, hooks/, rules/ | .audit-workspace/capability-discover-b.md | | C | src/adapters/, src/content/ | .audit-workspace/capability-discover-c.md |

Each sub-agent prompt MUST include: discovery slice from Step 2, the h4tcher-development context block (pillar test, lean thresholds, anti-slop wordlist ref, commit format) modeled on .claude/skills/h4tcher-pr-resolve/SKILL.md, the confidence-with-basis requirement from the rigor contract, and an explicit "no branches, no commits, no PRs, read-only" guardrail. T1 skips this step entirely.

Fan-out is task-derived (P8 B2): 0 sub-agents on T1, 3 on T2/T3. Token cost never serializes independent work (.claude/rules/fan-out-discipline.md Cost-dominance clause). Emit sub_agents_spawned: { count, rationale } in your output (the Sub-agents field of the Step 7 report).

Step 5: Cross-Skill Delegation

None. This preset is purely investigative — no delegation to h4tcher-content-author, h4tcher-adapter-author, or h4tcher-domain-author. The Step 7 report's "recommended next preset" field tells the maintainer which lifecycle preset to invoke next.

Step 6: Governance Gates (light)

  1. Re-read the report draft; remove any banned anti-slop phrase before emission (wordlist mirrored in CLAUDE.md and .claude/rules/anti-slop-enforcement.md).
  2. wc -l the rendered report — hard ceiling 150 lines (target 80).
  3. Verify every duplication candidate cites a concrete file path (with line number when relevant).
  4. Skip npm run validate / npm test — this preset writes nothing to the repo.

Step 7: Output (Capability Discovery Report)

Emit in chat using this exact template:

Capability Discovery Report
---------------------------
Tier: T1 | T2 | T3
Target intent: 
Candidate types: 
Pillar(s) served: P[, P, ...]

Duplication candidates (K):
   —  — 
  ...

Cross-reference impact: 
Pillar coverage delta: 
Sub-agents: count=, rationale=

Recommended next preset: 

Sources (if Step 3 ran): 
Confidence: high | medium | low — 

No files written to the repo; workspace slices remain under .audit-workspace/.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.