Install
$ agentstack add skill-vinta-hal-9000-best-practices ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Best Practices
Two-Phase Rule
- Phase 1: Research. Dispatch find-docs and/or WebSearch queries.
- Phase 2: Synthesize and act. Only after Phase 1 results arrive.
The user's argument may be a question or an imperative. Imperatives ("refine X", "set up Y") determine what Phase 2 does, not whether Phase 1 happens. Phase 1 always runs.
Red flags indicating you are about to skip research:
| Thought | Reality | | ------------------------- | -------------------------------------------------------------------------------------- | | "I already know this" | Training data goes stale. Config keys get renamed, APIs get deprecated. | | "The user said to act" | The imperative scopes Phase 2, it does not eliminate Phase 1. | | "This is a simple lookup" | A 30-second search costs nothing. A wrong recommendation costs a debugging round-trip. |
Workflow
1. Identify Research Targets
Break the topic into 2-4 specific queries targeting distinct aspects (libraries, patterns, configuration, pitfalls). For single-library lookups, call find-docs or WebSearch directly without subagents.
2. Parallel Research
Dispatch one subagent per query in a single message so they run in parallel. Each uses find-docs (Context7) and WebSearch. Be concrete in each subagent prompt: pass library names, version constraints, and the user's specific context. Vague prompts produce vague results.
The user wants to [user's task]. We need the latest, authoritative guidance on [specific aspect].
Research best practices for: [specific query]
Use the find-docs skill to look up [library/tool] documentation, then use WebSearch to find recent guides and recommendations for "[specific search query]".
Report in under 300 words. Include:
- Recommended approach with rationale
- Concrete code/config examples
- Pitfalls to avoid
- Sources consulted (with publication dates)
If you cannot find authoritative guidance on a point, say so explicitly rather than guessing.
3. Synthesize
Phase check: If no research results have arrived yet, STOP. You are still in Phase 1. Go back to step 2.
After all subagents return, merge using these criteria:
- Deduplicate overlapping recommendations
- Rank by authority: official docs > well-known guides > blog posts > training data
- Flag conflicts with attribution (which source said what)
- Discard stale results: a 2022 guide for a fast-moving framework is noise
If a subagent failed or returned empty, note the gap and proceed with the results you have. Do not block synthesis waiting for a straggler.
4. Present Findings
Deliver to the user in this structure:
- Recommended Approach: the primary recommendation with rationale
- Key Patterns: concrete code/config examples the user can apply immediately
- Pitfalls to Avoid: common mistakes with explanations
- Sources: what was consulted, so the user can dig deeper
Gotchas
- 2-4 focused subagents, not more. Each carries ~20K tokens of startup overhead. Fewer focused queries beat many shallow ones.
- User-provided URLs are additive. If the user provided specific URLs, fetch those too, but they supplement research, not replace it.
- Context7 quota limits exist. If
find-docsfails with quota errors, fall back toWebSearchonly and note the limitation. - If both
find-docsandWebSearchfail, say so explicitly rather than falling back to training data.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: vinta
- Source: vinta/hal-9000
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.