intake

A starting point for turning a rough idea, German or English voice transcript, or backlog line into a reviewable story document. It records what is needed and why, without designing the solution.

In plain words
What is it for?
Use it before design work to capture a request and save a story for later brainstorming. It also checks the project's AGENTS.md file for rules the future solution must follow.
Why use it?
It gives every request a consistent starting format and prevents solution details from being mixed into the initial requirements.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dsnger/dev-workflow-kit/intake
Any agent
npx skills add dsnger/dev-workflow-kit --skill intake
Clone the repo
git clone --depth 1 https://github.com/dsnger/dev-workflow-kit

Made for: Claude Code, Codex.

Per session 58 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,086 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00058 $0.04086
Opus 5 $0.00029 $0.02043
Sonnet 5 $0.00012 $0.00817
Haiku 4.5 $0.00006 $0.00409

Measured yesterday against content hash a23aeb3d2109, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

intake scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/dev-workflow/skills/intake/SKILL.md · 301 lines

How it starts

The opening of the file, as written. The whole thing — 301 lines — stays where its author put it; the contents beside it link to each section on GitHub.

intake

Overview

The front door of the spec-driven workflow. A raw idea or voice transcript goes in; a reviewable story artifact comes out at docs/superpowers/stories/YYYY-MM-DD-<topic>-story.md and feeds superpowers:brainstorming as its input document. This standardizes an entrance that otherwise varies by whoever writes the prompt.

intake captures WHAT and WHY, never HOW — designing the solution is brainstorming's job. That boundary governs every story section except Section 4 (Affected AGENTS.md invariants), which quotes existing project invariants verbatim as constraints the future solution must respect. Naming a guardrail the solution has to honor is not designing it — so "auth via the project's requireAuth barrier" belongs in Section 4, while "add a requireAuth call to the new handler" is a HOW leak anywhere else.

Target model: Claude via Claude Code. This skill is a prompt artifact and follows the checklist in docs/prompt-standards.md.

Requires AGENTS.md (the project's invariants file) — the Flow's invariant-tagging step greps it, and story Section 4 quotes what it finds. If the repo has none, say so and offer /dev-workflow:workflow-init, which walks you through writing one.

When to use

  • A raw idea or voice transcript arrives and needs to enter the workflow, before any brainstorming — so the entrance is consistent regardless of author.
  • A backlog line needs to become a reviewable story before design starts.

Not for designing a solution (that's superpowers:brainstorming), and not for items that already have an approved story/spec or have moved into solution design.

Flow

Follow in order. Each step names why it exists.

  1. Read the input — the idea or transcript (German or English). The story you write is in English (the codebase and AGENTS.md language), preserving domain terms the user used verbatim where meaning matters — so downstream grep and consistency hold even for German input.
  2. Detect ambiguity — if any of the six story sections can't be filled from the input without guessing (most often vague acceptance criteria or an unclear outcome), ask targeted questions first — surface gaps rather than filling them silently (CLAUDE.md §1).
  3. Assess the profile — derive a proposal for two axes and a validation mode, so the single question round below can carry it. Nothing is recorded yet:
    • Risktrivial (no behavioural effect in the artifact's own execution context; for a prompt artifact the text is the behaviour, so a wording change to a skill, command, agent definition, hook message or template is not trivial by default) · standard (a behaviour change hitting no named trigger — the default) · high (the change affects a named domain trigger — auth, permissions, payments, migrations, data deletion, public APIs, personal data, supply chain — or a named effect trigger — irreversibility, data loss or corruption, outage exposure).
    • Security relevancenone (touches no asset, trust boundary, role or external system — a real answer and the common one) · standard (touches one without changing what it permits) · high (changes a trust boundary, an authorization decision, or the handling of secret or personal data).
    • Validation mode, derived not asked: effective level = max(risk, security) over none|trivial → 0, standard → 1, high → 2battery / battery+check / battery+check+verification, plus +abuse-path when and only when security is high.

Read the full file on GitHub · 301 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 301 lines · 58 tokens per session scan A a23aeb3d2109

Subscribe to this mod's changes

intake is a skill published in the GitHub repository dsnger/dev-workflow-kit (5 stars, last pushed 6d ago), licensed MIT. It adds 58 tokens to every session and 4,086 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

run

Conduct a task end to end, from a one-line fix to a multi-day programme - a short interview, then autonomous execution to the finish. Classifies the task S/M/L/XL, configures itself to the repo, routes each role to a cost tier, drives the agent team from the kanban board, and stops only at genuine decisions. Use for…

jjanczur/tyran · 97 tokens

procoder

Work like a senior developer in a repository governed by procoder: run the commit gate before calling anything done, format and lint through the binary, and drive the spec, plan, todo, backlog, and sprint chain in .procoder/. Use this skill when the repository contains a .procoder/ directory or an AGENTS.md naming…

azrtydxb/procoder · 101 tokens

status

Where is the work right now. Regenerates the projections and the kanban board from the journal and answers with the progress line, the agents still running, the open gates and the resume steps. Read-only. Use for /tyran:status or when asked what is going on.

jjanczur/tyran · 58 tokens

dxkit-remediate

Set up and operate the remediation lane: preview the work-order plan (tiers, budgets, paused classes) at $0, run a task locally inside the verified frame (deterministic recipes first, a scoped agent only for what remains), enable the scheduled workflow, read the order ledger, and tune the budgets and the circuit…

vyuh-labs/dxkit · 151 tokens

backlog

Manage the project's tech debt backlog. Add, list, fix, wontfix, delete, prioritize, and suggest batch actions on tracked issues. Used by audit and review skills to persist findings, and directly by users to manage accumulated debt. Modes: list [category], add [description], fix B-{N}, wontfix B-{N} [reason], delete…

greglas75/zuvo · 85 tokens

Tech Debt Auditor

Identifies and prioritizes technical debt in a codebase with an effort/impact matrix.

Notysoty/openagentskills · 22 tokens