Install
$ agentstack add skill-wezendy-elon-musk-algorithm-skills-musk-step-1-question-requirements ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Step 1: Question Every Requirement
Every requirement needs a named human. Then challenge it.
Part of the [[musk-algorithm]]. First in the strict order. No gate. This is the entry point.
Why this step exists
Requirements accumulate anonymously. Once they have no owner, they become permanent. The most damaging requirements come from senior, smart, or admired sources because they get the least scrutiny. A requirement without a named owner is presumed invented.
Musk's framing: requirements must carry a name. Not "the legal department". Not "safety". Not "the customer". A real human, alive, who can defend it.
Protocol
For each requirement in scope:
- Demand attribution. Ask who specifically originated it. Push back on "the team", "compliance", "best practice", "the customer". These are not names.
- Steelman it. Restate the requirement in the strongest possible form, in the originator's own framing if possible.
- Challenge it. Ask what specifically would break if it were removed. Demand evidence the cost is real, not assumed. The smarter the originator, the harder the challenge.
- Make it less dumb. Reformulate the survivor to be sharper, more specific, narrower in scope. A vague requirement that survives unrevised is a failure of this step.
Output format
For each requirement, produce:
Requirement: [verbatim original]
Originator: [named human, or DELETE if none]
Steelman: [strongest version]
Challenge: [what might be wrong, vestigial, or overreaching]
Verdict: KEEP | REVISE | DELETE
If REVISE: [new wording]
If DELETE: [what breaks if removed, or "nothing identifiable"]
Anti-patterns to refuse
- "Just trust me, it's required." No. Demand the named originator.
- "This came from [senior person], so it must be right." Wrong direction. Smart-person requirements get more scrutiny, not less.
- "Compliance / legal / safety requires it." Demand the specific regulation, article, and the human inside the organization accountable for that interpretation.
- "We've always done it this way." This is the strongest signal to challenge.
- "It might be useful later." Default to DELETE. "Later" requirements are imagined, not real.
Completion criteria
This step is done when:
- Every requirement in scope has a named human owner, or has been deleted.
- Every surviving requirement has been steelmanned and challenged on the record.
- Every survivor is sharper than it was at the start.
Only then can [[musk-step-2-delete-parts]] begin.
Examples
Before: > "Every microservice must implement OpenTelemetry, structured logging, distributed tracing, and a /health endpoint with deep dependency checks."
Step 1 challenge: > Originator: CTO (named). Steelman: production request-serving services need observability for incident response. Challenge: this workload is a once-a-day cron with no inbound traffic. A /health endpoint with no caller is observability theater. Verdict: REVISE. New wording: "Request-serving services require OpenTelemetry, tracing, and /health. Batch jobs require structured logging and meaningful exit codes."
See also
- [[musk-algorithm]] (overview)
- [[musk-step-2-delete-parts]] (next)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: wezendy
- Source: wezendy/elon-musk-algorithm-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.