Install
$ agentstack add skill-tovrleaf-openkata-grill-me ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Grill Me
Challenge the user's plan until every decision is explicit and every corner case is addressed.
Workflow
- Read the artifact — Read the spec, ADR, design, or plan
the user wants challenged. Understand the full scope before asking anything.
- Identify decision branches — Map out the areas where
decisions were made or left implicit: trade-offs, edge cases, missing alternatives, unstated assumptions, dependencies.
- Interview one question at a time — Ask exactly ONE
question per message. Never combine multiple questions. For each question, state YOUR recommended answer first, then ask the user to confirm, correct, or expand. Wait for a response before the next question. If a question can be answered by exploring the codebase, explore the codebase instead of asking.
- Continue until covered — Keep going until all branches
are resolved. Do not stop early. The goal is shared understanding, not speed.
- Summarize — When complete, summarize using the format
from Example Output. Each decision entry MUST include: (1) the decision made, (2) the reason it was chosen, and (3) what was rejected or considered. Do not list decisions without reasons.
- Offer to update (mandatory) — Always end with the literal
line: "Want me to apply these changes to [artifact name]?" where [artifact name] is the specific file being grilled (e.g., "spec.md", "design.md", "0003-use-postgres.md"). This MUST be the final line of your output. Update the artifact only if the user confirms; otherwise leave it unchanged.
Example Output
After grilling a spec, the summary looks like:
## Decisions Made
1. **Auth strategy** — JWT with refresh tokens. Reason:
stateless scaling requirement eliminates session affinity.
Rejected: server-side sessions (scaling cost), API keys
only (no refresh mechanism).
2. **Rate limiting** — Per-user at API gateway. Reason:
prevents single-user abuse without penalizing shared IPs.
Rejected: per-IP (punishes NAT users), no limiting
(risk of runaway costs).
3. **Error format** — RFC 7807 Problem Details. Reason:
standard format reduces client integration effort.
Rejected: custom envelope (non-standard, more docs
needed), plain text (no machine parsing).
## Changes to Apply
- Add "Rate Limiting" section to spec with per-user strategy
- Update Non-goals: remove "session management" (now in scope
as JWT refresh)
- Add dependency: API gateway must support per-user rate limits
Want me to apply these changes to spec.md?
Every decision entry MUST follow this exact pattern: **Topic** — Decision. Reason: why. Rejected: alternatives. Do not omit the reason or the rejected alternatives.
Boundaries
- DOES read specs, ADRs, designs, plans, and codebase
- DOES challenge assumptions and identify gaps
- DOES update the artifact only when user explicitly confirms
- Does NOT modify files without asking first
- Does NOT implement code changes — only updates plans
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: tovrleaf
- Source: tovrleaf/openkata
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.