Official agent skill

Elicit

by DataDog in DataDog/datadog-agent

Run a structured discovery session to build an Allium specification through conversation.

OfficialApache-2.0Auto-check passed

Install Elicit

skills CLI
$ npx skills add DataDog/datadog-agent --skill elicit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install DataDog/datadog-agent elicit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/DataDog/datadog-agent.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/allium/skills/elicit .claude/skills/elicit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
elicit
GitHub stars
3.8k
Used in
1 other repo
Token cost
~3.7k tokens
SKILL.md length
1,900 words
Files
2 (incl. references)
Skills in repo
35
Repo updated
First seen
Licence
Apache-2.0

At a glance

Run a structured discovery session to build an Allium specification through conversation.

  • Works in 4 steps: Scope definition → Happy path flow → Edge cases and errors → …
  • The user wants to create a new spec from scratch
  • SKILL.md covers Scoping the specification, Finding the right level of…, Elicitation methodology and Elicitation principles, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Elicit is an agent skill from DataDog/datadog-agent, published by the product's own GitHub organization. Run a structured discovery session to build an Allium specification through conversation. Use when the user wants to create a new spec from scratch, elicit or gather requirements, capture domain behaviour, specify a feature or system, define what a system should do, or is describing functionality and needs help shaping it into a specification.

Its SKILL.md is about 3.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/library-spec-signals.md`).

The repository describes itself as: Main repository for Datadog Agent. The licence is Apache-2.0.

When your agent uses it

  • The user wants to create a new spec from scratch
  • Gather requirements
  • Capture domain behaviour
  • Specify a feature

Example prompts

  • “/elicit”

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. Scope definition
  2. Happy path flow
  3. Edge cases and errors
  4. Refinement

What it can do on your machine

Read from SKILL.md and the folder at commit 20eff25. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Elicit loads about 3.7k tokens when it runs, and up to ~4.9k if it reads all its reference files. Until then it costs about 88 tokens; SKILL.md has 1,900 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~88
When it runs · the whole SKILL.md, loaded when a task matches
~3.7k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~4.9k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from DataDog/datadog-agent at commit 20eff25, republished under its Apache-2.0 licence (© DataDog). 1,900 words, ~3,715 tokens.

Download SKILL.mdSave it as .claude/skills/elicit/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
elicit
description
Run a structured discovery session to build an Allium specification through conversation. Use when the user wants to create a new spec from scratch, elicit or gather requirements, capture domain behaviour, specify a feature or system, define what a system should do, or is describing functionality and needs help shaping it into a specification.
model
sonnet

Elicitation

This skill guides you through building Allium specifications by conversation. The goal is to surface ambiguities and produce a specification that captures what the software does without prescribing implementation.

The same principles apply to distillation. Whether you are hearing a stakeholder describe a feature or reading code that implements it, the challenge is identical: finding the right level of abstraction.

Scoping the specification

Before diving into details, establish what you are specifying. Not everything needs to be in one spec.

Questions to ask first

"What's the boundary of this specification?" A complete system? A single feature area? One service in a larger system? Be explicit about what is in and out of scope.

"Are there areas we should deliberately exclude?" Third-party integrations might be library specs. Legacy features might not be worth specifying. Some features might belong in separate specs.

"Is this a new system or does code already exist?" If code exists, you are doing distillation with elicitation. Existing code constrains what is realistic to specify.

Documenting scope decisions

Capture scope at the start of every spec:

-- allium: 3
-- interview-scheduling.allium

-- Scope: Interview scheduling for the hiring pipeline
-- Includes: Candidacy, Interview, Slot management, Invitations, Feedback
-- Excludes:
--   - Authentication (use oauth library spec)
--   - Payments (not applicable)
--   - Reporting dashboards (separate spec)
-- Dependencies: User entity defined in core.allium

The version marker (-- allium: N) must be the first line of every .allium file. Use the current language version number.

Finding the right level of abstraction

The hardest part of specification is choosing what to include and what to leave out. Too concrete and you are specifying implementation. Too abstract and you are not saying anything useful.

The "Why" test

For every detail, ask: "Why does the stakeholder care about this?"

DetailWhy?Include?
"Users log in with Google OAuth"They need to authenticateMaybe not, "Users authenticate" might be sufficient
"We support Google and Microsoft OAuth"Users choose their providerYes, the choice is domain-level
"Sessions expire after 24 hours"Security/UX decisionYes, affects user experience
"Sessions are stored in Redis"PerformanceNo, implementation detail
"Passwords must be 12+ characters"Security policyYes, affects users
"Passwords are hashed with bcrypt"Security implementationNo, how not what
The "Could it be different?" test

Ask: "Could this be implemented differently while still being the same system?"

  • If yes, it is probably an implementation detail. Abstract it away.
  • If no, it is probably domain-level. Include it.

Examples:

  • "Notifications sent via Slack". Could be email, SMS, etc. Abstract to Notification.created(channel: ...).
  • "Interviewers must confirm within 3 hours". This specific deadline matters at the domain level. Include the duration.
  • "We use PostgreSQL". Could be any database. Do not include.
  • "Data is retained for 7 years for compliance". Regulatory requirement. Include.
The "Template vs Instance" test

Is this a category of thing, or a specific instance?

Instance (implementation)Template (domain-level)
Google OAuthAuthentication provider
SlackNotification channel
15 minutesLink expiry duration (configurable)
Greenhouse ATSExternal candidate source

Sometimes the instance IS the domain concern. "We specifically integrate with Salesforce" might be a competitive feature. "We support exactly these three OAuth providers" might be design scope.

When in doubt, ask the stakeholder: "If we changed this, would it be a different system or just a different implementation?"

Levels of abstraction
Too abstract:          "Users can do things"
                              |
Product level:         "Candidates can accept or decline interview invitations"
                              |
Too concrete:          "Candidates click a button that POST to /api/invitations/:id/accept"

Signs you are too abstract. The spec could describe almost any system. No testable assertions. Product owner says "but that doesn't capture..."

Signs you are too concrete. You are mentioning technologies, frameworks or APIs. You are describing UI elements (buttons, pages, forms). The implementation team says "why are you dictating how we build this?"

Configuration vs hardcoding

When you encounter a specific value (3 hours, 7 days, etc.), ask:

  1. Is this value a design decision? Include it.
  2. Might it vary per deployment or customer? Make it configurable.
  3. Is it arbitrary? Consider whether to include it at all.
-- Hardcoded design decision
rule InvitationExpires {
    when: invitation: Invitation.created_at + 7.days <= now
    ...
}

-- Configurable
config {
    invitation_expiry: Duration = 7.days
}

rule InvitationExpires {
    when: invitation: Invitation.created_at + config.invitation_expiry <= now
    ...
}
Black boxes

Some logic is important but belongs at a different level:

-- Black box: we know it exists and what it considers, but not how
ensures: Suggestion.created(
    interviewers: InterviewerMatching.suggest(
        considering: {
            role.required_skills,
            Interviewer.skills,
            Interviewer.availability,
            Interviewer.recent_load
        }
    )
)

The spec says there is a matching algorithm, that it considers these inputs and that it produces interviewer suggestions. The spec does not say how matching works, what weights are used or the specific algorithm.

This is the right level when the algorithm is complex and evolving, when product owners care about inputs and outputs rather than internals, and when a separate detailed spec could cover it if needed.

Elicitation methodology

Phase 1: Scope definition

Goal: Understand what we are specifying and where the boundaries are.

Questions to ask:

  1. "What is this system fundamentally about? In one sentence?"
  2. "Where does this system start and end? What's in scope vs out?"
  3. "Who are the users? Are there different roles?"
  4. "What are the main things being managed, the nouns?"
  5. "Are there existing systems this integrates with? What do they handle?"

Outputs: List of actors and roles. List of core entities. Boundary decisions (what is external). One-sentence description.

Watch for: Scope creep ("and it also does X, Y, Z", gently refocus). Assumed knowledge ("obviously it handles auth", make explicit).

Phase 2: Happy path flow

Goal: Trace the main journey from start to finish.

Questions to ask:

  1. "Walk me through a typical [X] from start to finish"
  2. "What happens first? Then what?"
  3. "What triggers this? A user action? Time passing? Something else?"
  4. "What changes when that happens? What state is different?"
  5. "Who needs to know when this happens? How?"

Technique: Follow one entity through its lifecycle.

Candidacy:
  pending_scheduling -> scheduling_in_progress -> scheduled ->
  interview_complete -> feedback_collected -> decided

Outputs: State machines for key entities. Main triggers and their outcomes. Communication touchpoints.

Watch for: Jumping to edge cases too early ("but what if...", note it and stay on happy path). Implementation details creeping in ("the API endpoint...", redirect to outcomes).

Phase 3: Edge cases and errors

Goal: Discover what can go wrong and how the system handles it.

Questions to ask:

  1. "What if [actor] doesn't respond?"
  2. "What if [condition] isn't met when they try?"
  3. "What if this happens twice? Or in the wrong order?"
  4. "How long should we wait before [action]?"
  5. "When should a human be alerted to intervene?"
  6. "What if [external system] is unavailable?"

Technique: For each rule, ask "what are all the ways requires could fail?"

Outputs: Timeout and deadline rules. Retry and escalation logic. Error states. Recovery paths.

Watch for: Infinite loops ("then it retries, then retries again...", need terminal states). Missing escalation, because eventually a human needs to know.

When stakeholders state system-wide properties ("balance never goes negative", "no two interviews overlap for the same candidate"), these are candidates for top-level invariants. Capture them as invariant Name { expression } declarations.

Phase 4: Refinement

Goal: Clean up the specification and identify gaps.

Questions to ask:

  1. "Looking at [entity], are these states complete? Can it be in any other state?"
  2. "Is there anything we haven't covered?"
  3. "This rule references [X], do we need to define that, or is it external?"
  4. "Is this detail essential here, or should it live in a detailed spec?"

Technique: Read back the spec and ask "does this match your mental model?"

Outputs: Complete entity definitions. Open questions documented. Deferred specifications identified. External boundaries confirmed.

When the same obligation pattern (e.g. a serialisation contract, a deterministic evaluation requirement) appears across multiple surfaces, suggest extracting it as a contract declaration for reuse.

Show full SKILL.md (726 more words)Show less

Elicitation principles

Ask one question at a time

Bad: "What entities do you have, and what states can they be in, and who can modify them?"

Good: "What are the main things this system manages?" Then: "Let's take [Candidacy]. What states can it be in?" Then: "Who can change a candidacy's state?"

Work through implications

When a choice arises, do not just accept the first answer. Explore consequences.

"You said invitations expire after 48 hours. What happens then?" "And if the candidate still hasn't responded after we retry?" "What if they never respond, is this candidacy stuck forever?"

This surfaces decisions they have not made yet.

Distinguish product from implementation

When you hear implementation language, redirect:

They sayYou redirect
"The API returns a 404""So the user is informed it's not found?"
"We store it in Postgres""What information is captured?"
"The frontend shows a modal""The user is prompted to confirm?"
"We use a cron job""This happens on a schedule, how often?"
Surface ambiguity explicitly

Better to record an open question than assume.

"I'm not sure whether declining should return the candidate to the pool or remove them entirely. Let me note that as an open question."

open question "When candidate declines, do they return to pool or exit?"
Use concrete examples

Abstract discussions get stuck. Ground them.

"Let's say Alice is a candidate for the Senior Engineer role. She's been sent an invitation with three slots. Walk me through what happens when she clicks on Tuesday 2pm."

Iterate willingly

It is normal to revise earlier decisions.

"Earlier we said all admins see all notifications. But now you're describing role-specific dashboards. Should we revisit that?"

Know when to stop

Not everything needs to be specified now.

"This is getting into how the matching algorithm works. Should we defer that to a detailed spec?"

"We've covered the main flow. The reporting dashboard sounds like a separate specification."

Common elicitation traps

The "Obviously" trap

When someone says "obviously" or "of course", probe. "You said obviously the admin approves. Is there ever a case where they don't need to? Could this be automated later?"

The "Edge Case Spiral" trap

Some people want to cover every edge case immediately. "Let's capture that as an open question and stay on the main flow for now. We'll come back to edge cases."

The "Technical Solution" trap

Engineers especially jump to solutions. "I hear you saying we need real-time updates. At the domain level, what does the user need to see and when?"

The "Vague Agreement" trap

Do not accept "yes" without specifics. "You said yes, candidates can reschedule. How many times? Is there a limit? What happens after that?"

The "Missing Actor" trap

Watch for actions without clear actors. "You said 'the slots are released'. Who or what releases them? Is it automatic, or does someone trigger it?"

The "Equivalent Terms" trap

When you hear two terms for the same concept, from different stakeholders, existing code or related specs, stop and resolve it before continuing.

"You said 'Purchase' but earlier we called this an 'Order'. Which term should we use?"

A comment noting that two terms are equivalent is not a resolution. It guarantees both will appear in the implementation. Pick one term, cross-reference related specs and update all references. Do not leave the old term anywhere, not even in "see also" notes.

Elicitation session structure

Opening (5 min). Explain Allium briefly: "We're capturing what the software does, not how it's built." Set expectations: "I'll ask lots of questions, some obvious-seeming." Agree on scope for this session.

Scope definition (10-15 min). Identify actors, entities, boundaries. Get the one-sentence description.

Happy path (20-30 min). Trace main flow start to finish. Capture states, triggers, outcomes. Note communications.

Edge cases (15-20 min). Timeouts and deadlines. Failure modes. Escalation paths.

Wrap-up (5-10 min). Read back key decisions. List open questions. Identify next session scope if needed.

After session. Write up specification draft. Send for review. Note questions for next session.

After elicitation

For targeted changes where you already know what you want, use the tend agent. For substantial additions that need structured discovery (new feature areas, complex entity relationships, unclear requirements), elicit is still the right tool even if a spec already exists. Checking alignment between specs and implementation belongs to the weed agent.

References

© DataDog, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (references) in .agents/skills/allium/skills/elicit of DataDog/datadog-agent.

  • SKILL.md
  • references/library-spec-signals.md

Open the folder on GitHubat commit 20eff25

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders, from 1 other GitHub owner. This page covers the copy in DataDog/datadog-agent, which our catalogue first saw on October 8, 2026.

Compare with similar skills

Elicit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Elicit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Elicit this skillDataDog/datadog-agent3.8k1 repos~3.7kAutomated safety check: PassApache-2.0
Agent Specificationruvnet/ruflo74k3 repos~1.8kAutomated safety check: PassMIT
Specificity Managementthedaviddias/Front-End-Checklist74k—~477Automated safety check: PassMIT
Create Specificationgithub/awesome-copilot40k1 repos~1.4kAutomated safety check: PassMIT
Update Specificationgithub/awesome-copilot40k1 repos~1.4kAutomated safety check: PassMIT
PPTX Slide Specificationwshobson/agents40k—~489Automated safety check: PassMIT

Similar skills

  • Agent skill for specification - invoke with $agent-specification

    74k GitHub starsUsed in 3 repos~1.8k tokens
    Product & Project ManagementAuto-check passed
  • Specificity Management

    thedaviddias/Front-End-Checklist

    A skill your agent uses when reviewing stylesheets, component styles, and responsive behavior related to Keep CSS specificity low and flat.

    74k GitHub stars~477 tokensUpdated yesterday
    Frontend & DesignAuto-check passed
  • Create Specification

    github/awesome-copilot

    Official

    Create a new specification file for the solution, optimized for Generative AI consumption.

    40k GitHub starsUsed in 1 repo~1.4k tokens
    Auto-check passed
  • Update Specification

    github/awesome-copilot

    Official

    Update an existing specification file for the solution, optimized for Generative AI consumption based on new requirements or updates to any existing code.

    40k GitHub starsUsed in 1 repo~1.4k tokens
    Auto-check passed
  • A skill your agent uses when authoring or repairing a coordinate-explicit JSON specification for an editable PPTX deck.

    40k GitHub stars~489 tokensUpdated 3 days ago
    Documents & OfficeAuto-check passed
  • Official

    Create GitHub Issue for feature request from specification file using featurerequest.yml template.

    40k GitHub starsUsed in 1 repo~228 tokens
    Auto-check passed

More from DataDog/datadog-agent

All 35 skills in this repo
  • Triage CI Failure

    DataDog/datadog-agent

    Official

    Classify a failed CI as either caused by an active incident, flakiness, or a true code regression.

    3.8k GitHub stars~2.3k tokensUpdated today
    Auto-check passed
  • Follow PR

    DataDog/datadog-agent

    Official

    Monitor the current PR's GitLab pipeline to completion, then report success, auto-fix, or investigate a failure.

    3.8k GitHub stars~3.2k tokensUpdated today
    Auto-check passed
  • Create Epic Recap

    DataDog/datadog-agent

    Official

    A skill your agent uses when an engineer or manager asks to recap, summarize, or post an update on a Jira Epic — a progress update for an in-progress Epic (how far along it is, what's shipped so…

    3.8k GitHub stars~5k tokensUpdated today
    Auto-check: notes
  • Explain Lading Config

    DataDog/datadog-agent

    Official

    Explains a lading.yaml config file from the regression test suite, using the lading Rust source as ground truth for field meanings and defaults.

    3.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • Distill

    DataDog/datadog-agent

    Official

    Extract an Allium specification from an existing codebase. An agent skill from DataDog/datadog-agent.

    3.8k GitHub starsUsed in 1 repo~7k tokens
    Auto-check passed
  • Run E2E

    DataDog/datadog-agent

    Official

    Run one already-written new-e2e test locally and triage the setup failures that stop it — "run the containers e2e tests", "my e2e run fails before any test starts".

    3.8k GitHub stars~2.2k tokensUpdated today
    Auto-check: notes

Questions about Elicit

What does Elicit do?

Run a structured discovery session to build an Allium specification through conversation. Elicit is an agent skill from DataDog/datadog-agent, published by the product's own GitHub organization. Run a structured discovery session to build an Allium specification through conversation.

When should I use Elicit?

Elicit fits situations like: the user wants to create a new spec from scratch; gather requirements; capture domain behaviour; specify a feature.

How do I install Elicit in Claude Code?

Run `npx skills add DataDog/datadog-agent --skill elicit -a claude-code`. Or copy the skill folder (.agents/skills/allium/skills/elicit in DataDog/datadog-agent) into .claude/skills/elicit in your project. Claude Code loads it when a task matches its description.

How do I install Elicit in Codex?

Run `npx skills add DataDog/datadog-agent --skill elicit -a codex`. Or copy the skill folder (.agents/skills/allium/skills/elicit in DataDog/datadog-agent) into .agents/skills/elicit in your project. Codex loads it when a task matches its description.

Can I use Elicit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add DataDog/datadog-agent --skill elicit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/elicit, .gemini/skills/elicit, .github/skills/elicit and .opencode/skills/elicit in your project.

What does Elicit need to run?

SKILL.md names no scripts, command-line tools or credentials: Elicit is instructions for the agent only.

Does Elicit access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Elicit safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Elicit use?

Elicit is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Elicit use?

About 3.7k tokens (SKILL.md is roughly 15k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.2k tokens, read only when the agent opens those files.

What are the alternatives to Elicit?

Skills that share tags, products or a category with Elicit: Agent Specification (ruvnet/ruflo, 74k stars), Specificity Management (thedaviddias/Front-End-Checklist, 74k stars), Create Specification (github/awesome-copilot, 40k stars) and Update Specification (github/awesome-copilot, 40k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Elicit?

DataDog (a GitHub organization, an official publisher) maintains it in DataDog/datadog-agent, which has 3,757 GitHub stars. The repository holds 35 skills in this directory. The repository was last updated on October 8, 2026.

Source: DataDog/datadog-agent on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.