Install
$ agentstack add skill-wshobson-agents-before-you-build ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Before You Build
Run a compact pre-mortem before implementation. The goal is not to block building; it is to identify the highest-risk assumption, the smallest validation step, and the build scope that should be delayed until evidence improves.
When To Use
Use this skill when a user asks to build or ship:
- A new product, MVP, prototype, landing page, SaaS app, marketplace, content site, agent workflow, or internal tool
- A major feature with unclear adoption, revenue, retention, trust, or distribution impact
- A public launch asset where weak positioning could waste development or promotion effort
Skip this skill when the task is a narrow implementation fix, refactor, test repair, dependency update, or already-validated change with clear acceptance criteria.
Risk Checklist
Review the idea across these risks:
- Demand: Is there evidence that a specific buyer or user urgently wants this?
- Positioning: Can the target user understand what it is and why it matters in one sentence?
- Monetization: Is there a credible path to payment, budget, or strategic value?
- Retention: Is there a reason users would return after the first try?
- Trust: Does the product require credibility, data access, integrations, or behavior change that users may resist?
- Distribution: Is there a repeatable way to reach the target user?
- Feature adoption: For feature work, will the feature change user behavior or just add surface area?
If the verdict is not obvious, use references/risk-checklist.md for deeper questions.
Output Format
Keep the response short and decision-oriented:
- Risk verdict: Low, medium, or high risk, with one sentence explaining why.
- Main assumption: The single assumption most likely to break the project.
- Evidence to find first: The smallest useful signal before building more.
- Do next: One concrete validation step or reduced build scope.
- Delay: What not to build yet.
Guidance
- Be direct about weak evidence, but avoid dismissing the user's idea.
- Prefer smaller validation steps over large research plans.
- Separate product risk from engineering difficulty.
- If the idea is already validated, say what evidence makes it lower risk and suggest the smallest implementation slice.
- If facts are missing, name the missing evidence instead of inventing market claims.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: wshobson
- Source: wshobson/agents
- License: MIT
- Homepage: https://sethhobson.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.