agentleFS
CreeperprolCreeperprol/crucible/SKILL.md

crucible

Skill1 starsChanged 54 days agoMITView on GitHub

Attack an idea hard, find the flaw that actually kills it, then show how to rebuild it so it survives. Use this whenever the user asks you to attack, critique, poke holes in, stress-test, red-team, pressure-test, tear apart, or find what's wrong with an idea, plan, pitch, project, feature, architecture, or argument — and also when they ask "is this any good", "what would a skeptic say", "will this work", "what am I missing", or share a proposal and seem to want honest scrutiny rather than encouragement. Prefer this over a generic pros-and-cons list any time the user wants the weaknesses found rather than the idea summarized.

10 other projects use a version of this.

Adopted by

Most recently taken up by

The file

We split this skill into the rules it gives an agent

8 rules. 0 are common, 8 are distinctive, and 0 are very specific to this project.

  • 0

    Common

    Most of the 10 edited versions we read keep these.

  • 8

    Distinctive

    This author's own choices. Worth a look.

  • 0

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    Restate the idea in one sentence: before attacking it. If you can't, you don't understand it yet and your attack will hit a strawman.

    line 16
  2. Distinctive:

    Find the load-bearing claim: Every idea rests on one belief that, if false, takes everything with it.

    line 18
  3. Distinctive:

    Run the probes below: Don't run all of them mechanically — scan for the ones that bite.

    line 20
  4. Distinctive:

    Name one fatal flaw in one sentence: If you can't compress it, you haven't found it.

    line 26
  5. Distinctive:

    Invert the hierarchy: If the original part is unproven and the proven part is commodity, stop leading with the commodity.

    line 62
  6. Distinctive:

    Become the measurement: When the intervention can't be proven, the map often can.

    line 66
  7. Distinctive:

    Split the representations: When one design serves the machine and another serves the human, stop forcing one to do both.

    line 72
  8. Distinctive:

    Name the trade: If two goals genuinely conflict, don't hide it — state which axis you sacrificed and why.

    line 74

“Common” is measured: kept by at least 6 in 10 of the 10 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Crucible

Most critique is useless because it is polite, unordered, and aimed at the wrong layer. It lists ten small objections of equal weight, none of which would actually stop the thing, and it leaves the person with a longer to-do list and no decision.

A good attack does the opposite. It finds the one thing that kills the idea, says so plainly, and then — because the point is a better idea, not a defeated person — shows what a version that survives would look like.

The repair half is not politeness. It is the proof that the attack was real: if you understood the idea well enough to kill it, you understand it well enough to say what would have worked.

The shape of the work

  1. Restate the idea in one sentence before attacking it. If you can't, you don't understand it yet and your attack will hit a strawman. This also surfaces cases where the idea is actually two ideas wearing one name.
  2. Find the load-bearing claim. Every idea rests on one belief that, if false, takes everything with it. Usually it is an assumption about why people currently behave the way they do. Name it explicitly. Then ask the question that matters most: has anyone actually checked?
  3. Run the probes below. Don't run all of them mechanically — scan for the ones that bite. Two or three real hits beat twelve generic observations.
  4. Verify what is verifiable. If the idea depends on a fact — a competitor doesn't do X, an API returns Y, a dataset is downloadable — go and look. A single checked fact is worth more than a page of reasoning, and unverified confidence is exactly what you're supposed to be attacking. When you can't check, say so, and say what checking would cost.
  5. Order by lethality. Lead with the attack that ends the idea. Small wrinkles go at the bottom or get cut. Equal-weight lists are how real problems get lost.
  6. Name one fatal flaw in one sentence. If you can't compress it, you haven't found it.
  7. Give the cheapest decisive test. The one action, doable today, whose result settles whether this lives. Include the pass/fail line so it can't be rationalized afterwards.
  8. Repair by restructuring, not patching. See the repair patterns below.

Attack probes

The free alternative. What does zero money and ten seconds do instead? Idea dies here more often than anywhere else. A container you can put a sensor in is a container you could have thrown away. If the duct-tape version gets most of the benefit, the elaborate version needs a reason to exist beyond being more interesting to build.

The incumbent check. Who already does this — and have you looked, or assumed? Platform defaults, government tools, and the boring incumbent are where ideas go to die, and people skip checking because checking might hurt. Go look. If the incumbent already does it, that's not a scoring deduction, it's a credibility event when someone else finds it.

Self-defeat. Does one of the idea's own claims destroy another? These are the best findings because they can't be argued with — you're quoting the author to themselves. Look for: a stated fact that makes the mechanism unnecessary; two features that require incompatible architectures; a strength in one paragraph that is a weakness in the next.

The operator gap. Who physically holds the tool, and who has the problem? When they differ, ask whether the operator needs it. If the person pressing the button already knows the answer, the tool's value has quietly moved somewhere else — usually to the part that hasn't been built.

The selection paradox. Does it only work where you already knew the answer? Systems that require you to identify the risk before they can monitor it are strongest exactly where they're least needed.

The unmentioned. What does the description never once discuss? Power and batteries. Who pays. Who maintains it. Who has to say yes. What happens at 3am, or in year two. Silence is usually not an oversight — it's the part that was too hard to think about.

Failure over time. Week two, rainy season, after the novelty. Alarm fatigue, model staleness, adversarial drift, the volunteer who leaves. Many ideas work perfectly on day one and are muted by day ten.

The measurement hole. What outcome is claimed, and how would anyone know it happened? No ground truth means the impact claim is a story. Ask what data would distinguish success from wishful thinking, and whether it is being collected.

The demo lie. Can the core claim be shown, or must it be simulated? If the real behavior takes three days and the demo takes ten seconds, the audience is watching a variable you set yourself — and sophisticated audiences know it.

The permission path. Does this need a stranger, an institution, or an authority to agree? Then that is the critical path, not the code. Ask what evidence exists that this person has ever said yes — to anyone, about anything similar.

Distribution mismatch. Does the test setting match reality? Balanced training data against a 99-to-1 real world; five friendly users against strangers; a clean lab against a dirty kitchen.

Wrong shape for the audience. Strip the story away — what is actually being delivered? Then ask whether that satisfies the people judging it, in the terms they use. A beautiful social story wrapped around a database lookup fails a technical audience, and vice versa.

Repair patterns

A patch adds a caveat. A repair changes the structure so the attack no longer lands. Reach for these:

Invert the hierarchy. If the original part is unproven and the proven part is commodity, stop leading with the commodity. Make the original thing the product and the easy thing its supporting act — then go get evidence for the part that now carries the weight.

Move the buyer. Household product nobody would buy → institutional tool someone is already responsible for. Or the reverse: institutional product needing three signatures → personal tool needing none.

Become the measurement. When the intervention can't be proven, the map often can. Surveillance, audits and rankings are real deliverables, they need no behavior change from anyone, and the data collection doubles as the evidence.

Narrow to the defensible core. Cut everything you cannot demonstrate. A small true claim beats a large plausible one, especially under questioning.

Make the limitation the scope. "It only covers X" stated as a design decision, up front, with the reason, reads as rigor. The same sentence discovered by a critic reads as a hole.

Split the representations. When one design serves the machine and another serves the human, stop forcing one to do both. Two views of the same data is usually a few lines of code and resolves the contradiction entirely.

Name the trade. If two goals genuinely conflict, don't hide it — state which axis you sacrificed and why. "We chose privacy over freshness" is a defensible position. Pretending you got both is not.

Convert the assumption into an experiment. Take the load-bearing belief and design the cheapest test that turns it into evidence. Often one conversation, one afternoon, or ten phone calls.

Output format

Adapt the headings to the material, but keep this spine — it's what makes the critique usable rather than merely clever:

[One sentence restating the idea, so it's clear what is being attacked.]

**1. [The attack that kills it]** — the strongest one, first, with the concrete
mechanism by which it fails. Not "this may be difficult" but the specific
scenario, the specific person, the specific moment.

**2–5. [Descending severity]** — each one named as a claim, not a question.

**And two smaller wounds:** [one-liners for the wrinkles, so they're recorded
without diluting the serious findings]

**Fatal flaw:** [one sentence]

**The ten-minute test:** [the single action that settles it, with an explicit
pass/fail line]

**What survives:** [the restructured version, and what it costs to get there]

Calibration — this matters

Grade the severity honestly. Not everything found is fatal. Distinguish fatal (the idea cannot work in this form), structural (it works but loses most of its value), and wrinkle (annoying, fixable). Labelling a wrinkle as fatal destroys your credibility on the next attack; labelling a fatal flaw as a wrinkle wastes the person's month.

If it survives, say so. An attack skill that kills everything is a random number generator. When the idea holds up, say plainly that it holds up, then name the condition under which it would break and what evidence would show that early. That is a more useful output than a manufactured objection, and it's how the person learns to trust the process.

Never invent facts to make the attack land. A fabricated statistic or an imagined competitor is worse than no attack, because the person may act on it. If you suspect something without evidence, mark it as a suspicion and say how to check.

Attack the idea, never the person. "The founder is too close to see X" is a claim about the idea's blind spot and is fair. Contempt is not analysis, and it makes the repair section unreadable to the one person who needs it.

Don't hedge into uselessness. The person asked for an attack. "There may be some challenges around adoption" helps nobody. Say the thing.

Worked example, compressed

Idea: sensors in household water containers time how long water sits and alert the family to empty them before mosquito eggs hatch.

Load-bearing claim: people leave standing water because they forget.

Attacks that landed: the free alternative — any container you're willing to instrument you could have thrown away for nothing; self-defeat — the pitch itself says eggs survive dry periods for months on the container walls, which means the container is the risk variable, not the water duration, so the timer is measuring the wrong thing; the selection paradox — the sensors go in containers you already identified as risky, while real transmission comes from the gutter and the discarded bottle you never thought of; the unmentioned — battery life is never discussed, in a device whose entire purpose is to defeat human forgetfulness.

Fatal flaw: every container the system can protect is a container that could have been eliminated for free, and the containers that actually matter are the ones nobody thinks to instrument.

Repair — become the measurement: stop selling prevention to households. Instrument containers across a neighborhood and produce a map of where water persists longest, so the health volunteers' limited visits go to the right houses. Real algorithm, no competition with a plastic tray in a bin — but it now needs an institution to accept the data, and that dependency has to be tested first, not assumed.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.