Skip to content
/idea - From Brainstorm to PRD logo

/idea - From Brainstorm to PRD

Brainstorm a feature idea, then generate PRDs for Ralph autonomous execution.

SKILL.md

Full skill instructions

/​idea - From Brainstorm to PRD

You are helping the user go from a rough idea to executable PRDs for Ralph.

CRITICAL: This command does NOT write code. It produces documentation files only.

When to Use

WorkflowBest For
/​ideaStructured brainstorming with guided questions - Claude leads
Plan mode → save to docs/​ideas/Free-form exploration - you lead the thinking
/​prd "description"Quick PRD, no docs artifact needed

Both /​idea and plan mode can produce docs/​ideas/​*.md files. The difference is who drives the conversation:

  • /​idea asks you structured questions (scope, UX, edge cases, etc.)
  • Plan mode lets you explore freely with Claude's help

Use /​idea when you want the structured checklist. Use plan mode when you prefer to think through it your way.

User Input

$ARGUMENTS

Workflow

Step 1: Start Brainstorming

If $ARGUMENTS is empty, ask: "What feature or idea would you like to brainstorm?"

If $ARGUMENTS has content, acknowledge it and proceed.

Say: "Let's brainstorm this idea. I'll help you think it through, then we'll create documentation for Ralph to execute."

Step 2: Explore and Ask Questions

Help the user flesh out the idea through conversation:

  1. Understand the goal - What problem does this solve? Who benefits?
  2. Explore the codebase - Use Glob/​Grep/​Read to understand what exists and what patterns to follow
  3. Ask clarifying questions about:

Scope & UX:

  • What's in scope vs out of scope?
  • What does the user see/​do? (ask for mockup if UI)
  • What are the edge cases?

Security (IMPORTANT - ask if feature involves):

  • Authentication: Who can access this? Login required?
  • Passwords: How stored? (must be hashed, never plain text)
  • User input: What validation needed? (SQL injection, XSS, command injection)
  • Sensitive data: What should NEVER be in API responses?
  • Rate limiting: Should this be rate limited? (login attempts, API calls)

Scale (IMPORTANT - ask if feature involves lists/​data):

  • How many items expected? (10s, 1000s, millions?)
  • Pagination needed? What's the max per page?
  • Caching needed? How fresh must data be?
  • Database indexes: What will be queried/​sorted frequently?

Step 3: Summarize Before Writing

When you have enough information, summarize what you've learned:

Say: "Here's what I understand about the feature:

Problem: [summary] Solution: [summary] Key decisions: [list]

Ready to write this to docs/​ideas/​{feature-name}.md? Say 'yes' or tell me what to adjust."

STOP and wait for user confirmation before writing any files.

Step 4: Write the Idea File

Once the user confirms, write the idea file:

  1. Create the directory if needed:

    mkdir -p docs/​ideas
    
  2. Write to docs/​ideas/​{feature-name}.md with this structure:

    # {Feature Name}
    
    ## Problem
    What problem does this solve?
    
    ## Solution
    High-level description of the solution.
    
    ## User Stories
    - As a [user], I want to [action] so that [benefit]
    - ...
    
    ## Scope
    ### In Scope
    - ...
    
    ### Out of Scope
    - ...
    
    ## Architecture
    ### Directory Structure
    - Where new files should go (be specific: `src/​components/​forms/`, not just `src/`)
    
    ### Patterns to Follow
    - Existing components/​utilities to reuse
    - Naming conventions
    
    ### Do NOT Create
    - List things that already exist (avoid duplication)
    
    ## Security Requirements
    - **Authentication**: Who can access? Login required?
    - **Password handling**: Must be hashed with bcrypt (cost 10+), never in responses
    - **Input validation**: What must be validated/​sanitized?
    - **Rate limiting**: What should be rate limited?
    - **Sensitive data**: What must NEVER appear in logs/​responses?
    
    ## Scale Requirements
    - **Expected volume**: How many users/​items/​requests?
    - **Pagination**: Max items per page (recommend 100)
    - **Caching**: What can be cached? For how long?
    - **Database**: What indexes are needed?
    
    ## UI Mockup (if applicable)
    

    ┌─────────────────────────────────┐ │ [ASCII mockup of the UI] │ └─────────────────────────────────┘

    
    ## Open Questions
    - Any unresolved decisions
    
  3. Say: "I've written the idea to docs/​ideas/​{feature-name}.md.

    Review it and let me know:

    • 'approved' - Ready to generate PRD
    • 'edit [changes]' - Tell me what to change"

STOP and wait for user response. Do not proceed until they say 'approved' or 'done'.

Step 5: Generate PRD

Only proceed here after user explicitly approves the idea file.

Say: "Now I'll generate the PRD from your idea file."

Use the Skill tool to invoke /​prd with the idea file path:

Skill: prd
Args: docs/​ideas/​{feature-name}.md

This hands off to /​prd which handles:

  • Reading the idea file
  • Splitting into stories
  • Writing .ralph/​prd.json
  • All PRD schema details (testing, testSteps, MCP tools, etc.)

DO NOT duplicate the PRD schema or guidelines here - /​prd is the single source of truth.


Error Handling

  • If user provides no arguments, ask what they want to brainstorm
  • If user abandons mid-flow, the idea file is still saved for later
  • If /​prd fails, check the idea file has enough detail

Guidelines

Idea File Quality

A good idea file has:

  • Clear problem statement - What's broken or missing?
  • Specific solution - Not vague ("improve UX") but concrete ("add inline validation")
  • Scope boundaries - What's explicitly out of scope?
  • Architecture hints - Where do files go? What patterns to follow?

ASCII Art for UI

If the feature involves UI, include ASCII mockups in the idea file:

┌─────────────────────────────────────┐
│  Dashboard                    [⚙️]  │
├─────────────────────────────────────┤
│                                     │
│  ┌─────────┐  ┌─────────┐          │
│  │ Card 1  │  │ Card 2  │          │
│  │  $1,234 │  │  89%    │          │
│  └─────────┘  └─────────┘          │
│                                     │
│  ┌─────────────────────────────┐   │
│  │ Recent Activity              │   │
│  │ • Item 1                     │   │
│  │ • Item 2                     │   │
│  └─────────────────────────────┘   │
└─────────────────────────────────────┘

Ralph will read these from the idea file via story.contextFiles.

More Security skills

supabase logo
Security

supabase

Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...

2.7K 308.9K
View

Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.

98 216.2K
View

Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.

462 163.8K
View

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.

462 127.7K
View

Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.

462 125.1K
View

Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.

222 118.2K
View

Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".

31.9K 116.1K
View
cloudflare logo
Security

cloudflare

Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.

3K 110.7K
View

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

253 103K
View
gws-gmail logo
Security

gws-gmail

Send, read, and manage Gmail messages, drafts, labels, and account settings.

31.2K 78.9K
View

Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.

94 72.3K
View
gws-shared logo
Security

gws-shared

Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.

31.2K 63.4K
View

Security AI tools

StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
GeoSpy logo
Security

GeoSpy

GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams

Free
View

Detect AI-generated voices to protect against audio fraud.

Paid
View

Ensure Your Content's Originality with AI Plagiarism Checker

Freemium
View
Img Upscaler logo
Security

Img Upscaler

Upscale images by 400% without quality loss

Freemium
View
AICheatCheck logo
Security

AICheatCheck

Accurately Detect AI-Generated Content with TheChecker.AI

Free
View
D
Security

Detect GPT

Chrome extension that detects and flags AI-generated content

Free
View