Files
pm-claude-skills/TIERS.md
T
mohitagw15856 e9bc1d0626 Security auditor, personas, orchestration, docs catalog & roadmap (#35)
Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.

Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
  prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
  and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).

Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
  Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
  Solo Sprint patterns.

Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
  web/catalog.html of all skills (built in the Pages deploy; gitignored).
  Linked from README + playground.

Community:
- ROADMAP.md (now/next/later + good-first-issues).

README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.


Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px

Co-authored-by: Claude <noreply@anthropic.com>
2026-06-18 08:09:14 +01:00

88 lines
4.2 KiB
Markdown
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Skill Tiers
Not every skill in a 170+ library is at the same level of maturity — and pretending
otherwise wastes your time. This page tiers the skills honestly so you can start with the
strongest work and know what to expect from the rest.
| Tier | What it means |
|---|---|
| 🟢 **Production-Ready** | Battle-tested, stable output format, used in real work. Includes the skills with computed helper scripts. Start here. |
| 🔵 **Stable** | Solid and well-structured. Reliable output; smaller track record than Production-Ready. This is the default tier for most of the library. |
| 🟡 **Experimental** | Newer, niche, or dependent on an external tool/API/scrape (Gemini, Gmail, browser automation, social scraping). Useful, but more setup and more moving parts — expect rough edges. |
> ⚙️ = ships a stdlib-only Python helper script that computes part of the work.
---
## 🟢 Production-Ready (47)
These are the skills to reach for first — the most-used, most-refined frameworks in the
library.
**Product core**
`prd-template` · `meeting-notes` · `stakeholder-update` · `user-research-synthesis` · `competitive-analysis`
**Prioritisation & planning**
`rice-prioritisation` ⚙️ · `feature-prioritisation` · `okr-builder` · `roadmap-narrative` · `rice-impact-matrix`
**Delivery**
`sprint-planning` ⚙️ · `sprint-brief` · `user-story-writer` · `retro-analysis` · `ab-test-planner` · `product-launch-checklist` · `technical-spec-template`
**Discovery**
`customer-journey-map` · `assumption-mapper` · `user-interview-synthesis` · `discovery-interview-guide` · `job-story-mapper`
**Data & analytics**
`data-analysis-standard` · `retention-analysis` · `cohort-analysis` · `metrics-framework` · `product-health-analysis`
**Customer success**
`cs-health-scorecard` ⚙️ · `churn-analysis` · `qbr-deck` · `renewal-playbook` · `customer-success-plan` · `cs-escalation-brief`
**Engineering**
`code-review-checklist` · `incident-postmortem` · `architecture-decision-record` · `api-docs-writer` · `runbook-writer` · `changelog-generator` · `pr-description-writer` · `technical-debt-register`
**GTM & strategy**
`go-to-market` · `competitor-teardown` · `product-positioning-doc`
**Cross-profession**
`executive-summary` · `press-release` · `skill-security-auditor`
---
## 🟡 Experimental
These depend on external services, scraping, or browser/desktop automation. They can be
genuinely useful, but they have more setup and more failure modes than a self-contained
markdown skill — treat output as a strong draft, and expect to adapt them to your
environment.
| Skill | Why it's experimental |
|---|---|
| `instagram-post-downloader` | Depends on Instagram's page structure; can break when the site changes. |
| `substack-notes-scraper` | Scrapes Substack engagement data; fragile to layout changes. |
| `thumbnail-creator` | Requires a Gemini API key and image generation. |
| `notebooklm-connector` | Drives NotebookLM via a Chrome extension / browser automation. |
| `email-triage` | Requires Gmail access and a configured time window. |
| `morning-intelligence` | Designed for scheduled-task / routine setups; depends on your news sources. |
| `last-30-days-research` | Relies on live Reddit / X / web search availability and quality. |
| `competitor-signal-tracker` | Depends on the live sources you point it at. |
| `multi-source-signal-synthesiser` | Quality depends on the breadth/quality of sources supplied. |
---
## 🔵 Stable (everything else)
Every skill not listed above is **Stable**: well-structured, reliable output, broadly
useful — just with a shorter track record than the Production-Ready set. Browse the full
list in the [README](README.md#-all-167-skills).
---
*Tiers are reviewed as skills mature. New skills enter as Experimental and are promoted
once they have a stable output format and real-world use — see
[SKILL-AUTHORING-STANDARD.md](SKILL-AUTHORING-STANDARD.md#7-tiering). Think a skill is
mis-tiered? [Open an issue](../../issues).*
> **For tooling:** the machine-readable tier membership lives in
> [`skill-tiers.json`](skill-tiers.json) (the Skill Playground reads it to badge and
> filter skills). Keep this page and that file in sync when re-tiering.