SKILL.md
Auto-Research Skill
Overview
When implementing tasks, Claude Code can encounter uncertainties — design choices, algorithm details, API usage, or best practices. This skill provides an explicit-consent research path, presents findings, and waits for user approval before writing code.
The skill supports web research and an optional ChatGPT consultation. It never sends conversation context, files, browser state, or credentials to a third party without the user's explicit approval of the exact, redacted text.
When to Use This Skill
- User asks a question where multiple valid approaches exist
- Claude is uncertain about algorithm details or API usage
- Design/architecture choices need comparison
- The user explicitly asks to search the web or consult ChatGPT and approves the proposed query
How It Works
Step 1: Propose the research boundary — State the source to use, the exact query or redacted prompt, whether any local/workspace text would leave the machine, and the likely cost. Wait for the user to approve that exact boundary.
Step 2: Research — After approval, use web search or a browser session the user has
explicitly selected and authorized. Use a pinned, user-configured browser automation
connector; do not install packages automatically, use @latest, or access browser cookies,
other tabs, saved passwords, or sessions.
Step 3: Present — Distill findings into concise options with sources, presented to the user.
Step 4: Await Approval — Do NOT write code until the user says "go ahead" or picks an option.
Step 5: Implement — Once approved, execute with confidence.
Explicit ChatGPT Consultation
Do not treat ?, ??, or another shorthand as consent. First propose a minimal prompt,
for example: 请评估这个已脱敏的方案的正确性、完整性和可改进之处:<text>.
Explicitly identify every piece of text that would be sent. Only after the user confirms
the exact prompt may you open the selected ChatGPT session, submit that prompt, and present
the response. Do not include conversation history by default.
Redact secrets, personal data, proprietary code, customer data, and internal URLs before proposing the prompt. If safe redaction is not possible, do not submit it.
