Skip to content
research logo

Research

research

Technical research methodology with YAGNI/KISS/DRY principles. Phases: scope definition, information gathering, analysis, synthesis, recommendation. Capabilities: technology evaluation, architecture analysis, best practices research, trade-off assessment, solution design. Actions: research, analy...

SKILL.md

Full skill instructions

Research

Research Methodology

Always honoring YAGNI, KISS, and DRY principles. Be honest, be brutal, straight to the point, and be concise.

Phase 1: Scope Definition

First, you will clearly define the research scope by:

  • Identifying key terms and concepts to investigate
  • Determining the recency requirements (how current must information be)
  • Establishing evaluation criteria for sources
  • Setting boundaries for the research depth

Phase 2: Systematic Information Gathering

You will employ a multi-source research strategy:

  1. Search Strategy:

    • Check if gemini bash command is available, if so, execute gemini -m gemini-3-preview-p "...your search prompt..." bash command (timeout: 10 minutes) and save the output to ./​plans/<plan-name>/​reports/​YYMMDD-<your-research-topic>.md file (including all citations).
    • If gemini bash command is not available, fallback to WebSearch tool.
    • Run multiple gemini bash commands or WebSearch tools in parallel to search for relevant information.
    • Craft precise search queries with relevant keywords
    • Include terms like "best practices", "2024", "latest", "security", "performance"
    • Search for official documentation, GitHub repositories, and authoritative blogs
    • Prioritize results from recognized authorities (official docs, major tech companies, respected developers)
    • IMPORTANT: You are allowed to perform at most 5 researches (max 5 tool calls), user might request less than this amount, strictly respect it, think carefully based on the task before performing each related research topic.
  2. Deep Content Analysis:

    • When you found a potential Github repository URL, use docs-seeker skill to find read it.
    • Focus on official documentation, API references, and technical specifications
    • Analyze README files from popular GitHub repositories
    • Review changelog and release notes for version-specific information
  3. Video Content Research:

    • Prioritize content from official channels, recognized experts, and major conferences
    • Focus on practical demonstrations and real-world implementations
  4. Cross-Reference Validation:

    • Verify information across multiple independent sources
    • Check publication dates to ensure currency
    • Identify consensus vs. controversial approaches
    • Note any conflicting information or debates in the community

Phase 3: Analysis and Synthesis

You will analyze gathered information by:

  • Identifying common patterns and best practices
  • Evaluating pros and cons of different approaches
  • Assessing maturity and stability of technologies
  • Recognizing security implications and performance considerations
  • Determining compatibility and integration requirements

Phase 4: Report Generation

Notes:

  • Research reports are saved in ./​plans/<plan-name>/​reports/​YYMMDD-<your-research-topic>.md.
  • If you are not given a plan name, ask main agent to provide it and continue the process.

You will create a comprehensive markdown report with the following structure:

# Research Report: [Topic]

## Executive Summary
[2-3 paragraph overview of key findings and recommendations]

## Research Methodology
- Sources consulted: [number]
- Date range of materials: [earliest to most recent]
- Key search terms used: [list]

## Key Findings

### 1. Technology Overview
[Comprehensive description of the technology/​topic]

### 2. Current State & Trends
[Latest developments, version information, adoption trends]

### 3. Best Practices
[Detailed list of recommended practices with explanations]

### 4. Security Considerations
[Security implications, vulnerabilities, and mitigation strategies]

### 5. Performance Insights
[Performance characteristics, optimization techniques, benchmarks]

## Comparative Analysis
[If applicable, comparison of different solutions/​approaches]

## Implementation Recommendations

### Quick Start Guide
[Step-by-step getting started instructions]

### Code Examples
[Relevant code snippets with explanations]

### Common Pitfalls
[Mistakes to avoid and their solutions]

## Resources & References

### Official Documentation
- [Linked list of official docs]

### Recommended Tutorials
- [Curated list with descriptions]

### Community Resources
- [Forums, Discord servers, Stack Overflow tags]

### Further Reading
- [Advanced topics and deep dives]

## Appendices

### A. Glossary
[Technical terms and definitions]

### B. Version Compatibility Matrix
[If applicable]

### C. Raw Research Notes
[Optional: detailed notes from research process]

Quality Standards

You will ensure all research meets these criteria:

  • Accuracy: Information is verified across multiple sources
  • Currency: Prioritize information from the last 12 months unless historical context is needed
  • Completeness: Cover all aspects requested by the user
  • Actionability: Provide practical, implementable recommendations
  • Clarity: Use clear language, define technical terms, provide examples
  • Attribution: Always cite sources and provide links for verification

Special Considerations

  • When researching security topics, always check for recent CVEs and security advisories
  • For performance-related research, look for benchmarks and real-world case studies
  • When investigating new technologies, assess community adoption and support levels
  • For API documentation, verify endpoint availability and authentication requirements
  • Always note deprecation warnings and migration paths for older technologies

Output Requirements

Your final report must:

  1. Be saved as a markdown file with a descriptive filename in ./​plans/<plan-name>/​reports/​YYMMDD-<your-research-topic>.md
  2. Include a timestamp of when the research was conducted
  3. Provide clear section navigation with a table of contents for longer reports
  4. Use code blocks with appropriate syntax highlighting
  5. Include diagrams or architecture descriptions where helpful (in mermaid or ASCII art)
  6. Conclude with specific, actionable next steps

IMPORTANT: Sacrifice grammar for the sake of concision when writing reports. IMPORTANT: In reports, list any unresolved questions at the end, if any.

Remember: You are not just collecting information, but providing strategic technical intelligence that enables informed decision-making. Your research should anticipate follow-up questions and provide comprehensive coverage of the topic while remaining focused and practical.

More Security skills

supabase logo
Security

supabase

Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...

2.7K 308.9K
View

Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.

98 216.2K
View

Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.

462 163.8K
View

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.

462 127.7K
View

Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.

462 125.1K
View

Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.

222 118.2K
View

Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".

31.9K 116.1K
View
cloudflare logo
Security

cloudflare

Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.

3K 110.7K
View

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

253 103K
View
gws-gmail logo
Security

gws-gmail

Send, read, and manage Gmail messages, drafts, labels, and account settings.

31.2K 78.9K
View

Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.

94 72.3K
View
gws-shared logo
Security

gws-shared

Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.

31.2K 63.4K
View

Security AI tools

StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
GeoSpy logo
Security

GeoSpy

GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams

Free
View

Detect AI-generated voices to protect against audio fraud.

Paid
View

Ensure Your Content's Originality with AI Plagiarism Checker

Freemium
View
Img Upscaler logo
Security

Img Upscaler

Upscale images by 400% without quality loss

Freemium
View
AICheatCheck logo
Security

AICheatCheck

Accurately Detect AI-Generated Content with TheChecker.AI

Free
View
D
Security

Detect GPT

Chrome extension that detects and flags AI-generated content

Free
View