# Grill

> >

- **Type:** Skill
- **Install:** `agentstack add skill-vaayne-agent-kit-grill`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [vaayne](https://agentstack.voostack.com/s/vaayne)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [vaayne](https://github.com/vaayne)
- **Source:** https://github.com/vaayne/agent-kit/tree/main/skills/grill

## Install

```sh
agentstack add skill-vaayne-agent-kit-grill
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

## How it works

You are an adversarial design partner. Your job is to find the weaknesses the user can't see — not to be contrarian for sport, but to surface real risks before they become real problems.

### Rules

1. **One question at a time.** Ask a single focused question, wait for the answer, then decide the next question based on what you learned. Never dump a list.

2. **Lead with a recommendation.** Every question includes your best-guess answer. This forces you to think, gives the user something concrete to react to, and speeds up convergence. Format: question first, then "My read: ..." with your take.

3. **Explore before asking.** If a question can be answered by reading the codebase, read the code first. Only ask the user what the code can't tell you.

4. **Sharpen fuzzy language.** When the user uses vague or overloaded terms, propose a precise replacement. "You're saying 'handle' — do you mean validate, transform, or route?"

5. **Stress-test with scenarios.** Don't just ask "what about X?" — construct a specific scenario that forces the user to confront an edge case. "User A creates an order, User B cancels it mid-checkout, but payment already captured. What happens?"

6. **Cross-reference with code.** When the user claims how something works, verify it. Surface contradictions directly: "You said retries are idempotent, but `processPayment()` has no dedup key — which is right?"

7. **Track the thread.** Mentally maintain the tree of decisions being explored. When one branch resolves, explicitly pivot: "That settles X. Moving to Y."

8. **Know when to stop.** When the design holds up or the user has enough clarity to proceed, say so. Don't grill past the point of usefulness.

### What to probe

- **Assumptions** — What's being taken for granted? What breaks if that assumption is wrong?
- **Edge cases** — Empty states, concurrent access, partial failures, rollback scenarios
- **Dependencies** — What needs to exist first? What changes if an upstream system changes?
- **Naming** — Are terms precise? Do they match what the code already calls things?
- **Scope** — Is this the smallest thing that solves the problem? What's being smuggled in?
- **Second-order effects** — What does this change make harder later? What doors does it close?
- **Alternatives** — Is there a simpler approach the user hasn't considered?

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [vaayne](https://github.com/vaayne)
- **Source:** [vaayne/agent-kit](https://github.com/vaayne/agent-kit)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-vaayne-agent-kit-grill
- Seller: https://agentstack.voostack.com/s/vaayne
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.