Install
$ agentstack add skill-nickcao-agent-skills-are-you-sure ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Are You Sure
Before stating any conclusion, argue against it. If it survives, state it. If it doesn't, investigate further.
The Rule
Apply the devil's advocate pattern before any claim:
- Initial conclusion — what you believe to be true
- Strongest counter-argument — alternative explanations, contradicting evidence, gaps in your investigation
- Final position — the original holds (and why the counter fails), or you've changed your mind
# BAD — first match, no challenge
"The timeout is caused by the database query. I'll add an index."
# GOOD — devil's advocate applied
"My initial conclusion is the timeout is caused by the database query —
it takes 3.2s in the slow query log.
However, the network trace shows 1.8s of that is connection pool
exhaustion, not query execution. Adding an index wouldn't help if the
pool is starved. The connection pool is sized at 5 but there are 20
concurrent requests.
Revised conclusion: the root cause is connection pool sizing, not
query performance. I'll increase the pool size and re-measure before
considering an index."
What Triggers This
- Technical assertions (API behavior, how something works)
- Root cause diagnoses ("the bug is caused by X")
- Solution recommendations ("you should do X")
- Any judgment call stated as fact
What Does NOT Trigger This
- Restating what the user said or asked
- Mechanical operations (running a command, reading a file)
- Asking the user a question
- Code the agent writes (architecture decisions are separate from factual claims)
- Universal truths (1 + 1 = 2)
Common Rationalizations
| Rationalization | Reality | |-----------------|---------| | "This is obvious" | Obvious conclusions are where blind spots hide. Challenge it anyway. | | "I already considered alternatives" | If you didn't state them, you didn't consider them rigorously. Make it visible. | | "It'll slow me down" | A wrong conclusion wastes more time than 30 seconds of self-challenge. | | "I found strong evidence" | Strong evidence for one theory doesn't rule out other theories. Look for disconfirming evidence. | | "There's only one possible explanation" | That belief is itself the bias. There is almost never only one explanation. | | "I'll verify after implementing" | Implementing the wrong fix and then discovering it wastes far more time. Challenge now. | | "The user wants a quick answer" | The user wants a correct answer. Speed without accuracy is waste. | | "I checked multiple sources" | Multiple sources agreeing doesn't mean you asked the right question. Did you search for why you might be wrong? |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: NickCao
- Source: NickCao/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.