Files
pm-claude-skills/TIERS.md
T
mohitagw15856 e9bc1d0626 Security auditor, personas, orchestration, docs catalog & roadmap (#35)
Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.

Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
  prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
  and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).

Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
  Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
  Solo Sprint patterns.

Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
  web/catalog.html of all skills (built in the Pages deploy; gitignored).
  Linked from README + playground.

Community:
- ROADMAP.md (now/next/later + good-first-issues).

README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.


Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px

Co-authored-by: Claude <noreply@anthropic.com>
2026-06-18 08:09:14 +01:00

88 lines
4.2 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Skill Tiers
Not every skill in a 170+ library is at the same level of maturity — and pretending
otherwise wastes your time. This page tiers the skills honestly so you can start with the
strongest work and know what to expect from the rest.
| Tier | What it means |
|---|---|
| 🟢 **Production-Ready** | Battle-tested, stable output format, used in real work. Includes the skills with computed helper scripts. Start here. |
| 🔵 **Stable** | Solid and well-structured. Reliable output; smaller track record than Production-Ready. This is the default tier for most of the library. |
| 🟡 **Experimental** | Newer, niche, or dependent on an external tool/API/scrape (Gemini, Gmail, browser automation, social scraping). Useful, but more setup and more moving parts — expect rough edges. |
> ⚙️ = ships a stdlib-only Python helper script that computes part of the work.
---
## 🟢 Production-Ready (47)
These are the skills to reach for first — the most-used, most-refined frameworks in the
library.
**Product core**
`prd-template` · `meeting-notes` · `stakeholder-update` · `user-research-synthesis` · `competitive-analysis`
**Prioritisation & planning**
`rice-prioritisation` ⚙️ · `feature-prioritisation` · `okr-builder` · `roadmap-narrative` · `rice-impact-matrix`
**Delivery**
`sprint-planning` ⚙️ · `sprint-brief` · `user-story-writer` · `retro-analysis` · `ab-test-planner` · `product-launch-checklist` · `technical-spec-template`
**Discovery**
`customer-journey-map` · `assumption-mapper` · `user-interview-synthesis` · `discovery-interview-guide` · `job-story-mapper`
**Data & analytics**
`data-analysis-standard` · `retention-analysis` · `cohort-analysis` · `metrics-framework` · `product-health-analysis`
**Customer success**
`cs-health-scorecard` ⚙️ · `churn-analysis` · `qbr-deck` · `renewal-playbook` · `customer-success-plan` · `cs-escalation-brief`
**Engineering**
`code-review-checklist` · `incident-postmortem` · `architecture-decision-record` · `api-docs-writer` · `runbook-writer` · `changelog-generator` · `pr-description-writer` · `technical-debt-register`
**GTM & strategy**
`go-to-market` · `competitor-teardown` · `product-positioning-doc`
**Cross-profession**
`executive-summary` · `press-release` · `skill-security-auditor`
---
## 🟡 Experimental
These depend on external services, scraping, or browser/desktop automation. They can be
genuinely useful, but they have more setup and more failure modes than a self-contained
markdown skill — treat output as a strong draft, and expect to adapt them to your
environment.
| Skill | Why it's experimental |
|---|---|
| `instagram-post-downloader` | Depends on Instagram's page structure; can break when the site changes. |
| `substack-notes-scraper` | Scrapes Substack engagement data; fragile to layout changes. |
| `thumbnail-creator` | Requires a Gemini API key and image generation. |
| `notebooklm-connector` | Drives NotebookLM via a Chrome extension / browser automation. |
| `email-triage` | Requires Gmail access and a configured time window. |
| `morning-intelligence` | Designed for scheduled-task / routine setups; depends on your news sources. |
| `last-30-days-research` | Relies on live Reddit / X / web search availability and quality. |
| `competitor-signal-tracker` | Depends on the live sources you point it at. |
| `multi-source-signal-synthesiser` | Quality depends on the breadth/quality of sources supplied. |
---
## 🔵 Stable (everything else)
Every skill not listed above is **Stable**: well-structured, reliable output, broadly
useful — just with a shorter track record than the Production-Ready set. Browse the full
list in the [README](README.md#-all-167-skills).
---
*Tiers are reviewed as skills mature. New skills enter as Experimental and are promoted
once they have a stable output format and real-world use — see
[SKILL-AUTHORING-STANDARD.md](SKILL-AUTHORING-STANDARD.md#7-tiering). Think a skill is
mis-tiered? [Open an issue](../../issues).*
> **For tooling:** the machine-readable tier membership lives in
> [`skill-tiers.json`](skill-tiers.json) (the Skill Playground reads it to badge and
> filter skills). Keep this page and that file in sync when re-tiering.