Skills

product-skills

product-skills is a skill in alirezarezvani/claude-skills, last changed 20 Oct 2026. It can run shell commands, name web addresses and bundle scripts. Our pattern check flagged nothing at commit 5434623 on 26 Oct 2026.

Pattern check: nothing flagged · commit 5434623 · 26 Oct 2026

Install
From the author
Use when coordinating product work across the 12 bundled product sub-skills (RICE, OKRs, UX research, design tokens, competitive teardown, analytics, experiments, discovery, roadmaps, spec-to-repo, landing pages, SaaS scaffolding) or the 4 standalone product-team plugins (user stories, Apple HIG, code-to-PRD, research summarizer). Triggers on 'help me prioritize', 'plan a product experiment', 'we ship features nobody uses', 'run the discovery loop', 'is our OST sound'. Forks context to route to one sub-skill via a deterministic signal router and returns a digest; can also drive a continuous-discovery loop (Torres cadence tracker + OST linter as machine gates) or a full goal→plan→execute→verify→close run through the repo-wide agent-harness. Distinct from project-management (how to deliver vs what to build), marketing/landing (from-scratch pages), and engineering/agent-harness (the generic loop engine this orchestrator plugs into).
Licence
MIT
Repo stars
28.8k
Folder last changed
20 Oct 2026 (opens in a new tab)
Publisher
alirezarezvani
Files
9 files
Checked
5434623 (opens in a new tab) · 26 Oct 2026

Install

Each tab says whether it installs commit 5434623, the one we checked, or the latest version.

No tab for your agent? Use Any agent for OpenCode, Goose, Windsurf (Devin Desktop), Zed, Roo Code, Factory Droid, Junie, Amp and Antigravity, and Claude Code for Cline. Kiro needs the folder copied by hand.

Pinned to commit 5434623, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&
  git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/alirezarezvani/claude-skills.git "$tmp" &&
  git -C "$tmp" fetch -q --depth 1 origin 5434623a788ec3105d238328cfe554e1e2242ff7 &&
  git -C "$tmp" sparse-checkout set -- product-team/skills/product-skills &&
  git -C "$tmp" checkout -q 5434623a788ec3105d238328cfe554e1e2242ff7 &&
  mkdir -p .claude/skills &&
  mkdir .claude/skills/product-skills &&
  cp -R "$tmp"/product-team/skills/product-skills/. .claude/skills/product-skills/ &&
  rm -rf "$tmp"

If Claude Code was already running and this created the skills folder, run /reload-skills.

Or install the product-skills plugin it ships in. Installs the latest version, not the one we checked. Installs everything in the plugin, including any hooks, MCP servers and scripts our check doesn't cover.

claude plugin marketplace add alirezarezvani/claude-skills --scope project &&
  claude plugin install product-skills@claude-code-skills --scope project
Claude Code docs (opens in a new tab)

What it can touch

From the files and frontmatter at commit 5434623. This is how much a skill can do, not whether it is risky.

What it can touch: Scripts or outside hosts

  • Runs shell commands

    Its instructions or files give the agent commands to run on your computer.

  • Names web addresses

    It mentions outside web addresses the agent may visit. We list them but don't follow them.

  • Bundles scripts

    The folder holds code files the agent may run.

Pattern check

Pattern check: nothing flagged · commit 5434623 · 26 Oct 2026

We checked every text file in this skill, at commit 5434623 on 26 Oct 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.

How the check worksReport an incorrect finding

Outside links we did not follow

  • https://www.lennysnewsletter.com/p/beyond-vibe-checks-a-pms-complete
  • https://www.braintrust.dev/blog/evals-for-pms
  • https://www.news.aakashg.com/p/ai-evals
  • https://arxiv.org/abs/1810.03993
  • https://www.anthropic.com/research/building-effective-agents
  • https://www.producttalk.org/opportunity-solution-trees/
  • https://jobstobedone.org/
  • https://www.nngroup.com/articles/which-ux-research-methods/
  • https://www.producttalk.org/the-product-operating-model/
  • https://www.svpg.com/the-product-operating-model-an-introduction/
Show 6 more
  • https://amplitude.com/books/north-star/about-north-star-framework
  • https://productled.com/blog/product-led-growth-benchmarks
  • https://openviewpartners.com/blog/your-guide-to-product-led-growth-benchmarks/
  • https://framework.scaledagile.com/wsjf
  • https://jchyip.medium.com/problems-i-have-with-safe-style-wsjf-772df2beaf02
  • https://posthog.com/docs/product-analytics/best-practices

Format check

Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.

  • Agent Skills specPasses with warnings

    The open format from agentskills.io, held to what the strictest agents enforce, so one folder loads everywhere.

    • Warning

      The frontmatter uses [ ] or { } values. Most agents accept them, but the spec's validator (skills-ref) rejects the file. F4

      Fix: Write lists as "- item" lines and maps as indented key: value lines, without anchors or tags.

    • Warning

      Fields outside the spec: context (read by Claude Code and VS Code). Uploads to the Claude apps and API, and the spec's validator, reject the file; most agents ignore these fields. O1

      Fix: Delete them for a portable skill, or keep them if you only target the agents that read them.

    • Warning

      metadata values should be text; tags (a list) and compatible_tools (a list) are not. The spec's validator turns them into text; other readers may not. O4

      Fix: Quote each value, for example version: "1.0".

    • Note

      The first sentence of the description is 332 characters. Agents shorten long descriptions, so lead with the main job. D8

      Fix: Start with one short sentence that names the job.

  • Claude CodePasses

    Claude Code reads its own extra fields, ignores unknown ones, and still loads a skill whose frontmatter is broken, without its fields.

    • Note

      The first sentence of the description is 332 characters. Agents shorten long descriptions, so lead with the main job. D8

      Fix: Start with one short sentence that names the job.

  • Claude apps & API uploadFails

    Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.

    • Error

      Upload and packaging fail on fields outside the spec: context. O1

      Fix: Delete them, and keep your own data under metadata as text values.

    • Note

      The description is 943 characters. The claude.ai Help Center says 200 at most, though Anthropic's API docs and validator allow 1,024. D4

      Fix: If the claude.ai upload refuses it, trim the description to 200 characters.

    • Note

      metadata values should be text; tags (a list) and compatible_tools (a list) are not. The spec defines metadata as text to text. O4

      Fix: Quote each value, for example version: "1.0".

  • OpenAI (Codex & API)Passes with warnings

    Codex finds SKILL.md by its exact name and needs a description; OpenAI's Skills API checks the frontmatter against the spec and caps uploads.

    • Warning

      Fields outside the spec: context. Codex ignores them; OpenAI doesn't say whether its upload accepts them. O1

      Fix: Delete them, or move your own data under metadata as text values.

    • Warning

      metadata values should be text; tags (a list) and compatible_tools (a list) are not. OpenAI's upload follows the spec's text-to-text rule. O4

      Fix: Quote each value, for example version: "1.0".

    • Note

      The first sentence of the description is 332 characters. Agents shorten long descriptions, so lead with the main job. D8

      Fix: Start with one short sentence that names the job.

  • VS Code & CopilotPasses

SKILL.md

Files

9 files

PathSize
SKILL.md (opens in a new tab)10.3 KB
assets/sample_discovery_log.json (opens in a new tab)965 B
assets/sample_ost.json (opens in a new tab)984 B
references/ai_product_evals.md (opens in a new tab)3.6 KB
references/continuous_discovery_canon.md (opens in a new tab)3.9 KB
references/product_operating_model.md (opens in a new tab)3.9 KB
scripts/discovery_cadence_tracker.py (opens in a new tab)7.8 KB
scripts/ost_linter.py (opens in a new tab)7.1 KB
scripts/product_goal_router.py (opens in a new tab)8.5 KB

More from alirezarezvani/claude-skills

  • a11y-audit

    alirezarezvani/claude-skills

    Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular, Svelte, and plain HTML codebases. Use when auditing accessibility, fixing a11y violations, checking color contrast, generating compliance reports, or integrating accessibility checks into CI/CD pipelines.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands · Names web addresses +1

    MIT · 28.8k repo stars · Updated 11 Jun 2026

  • ab-test-setup

    alirezarezvani/claude-skills

    When the user wants to plan, design, or implement an A/B test or experiment. Also use when the user mentions "A/B test," "split test," "experiment," "test this change," "variant copy," "multivariate test," "hypothesis," "conversion experiment," "statistical significance," or "test this." For tracking implementation, see analytics-tracking.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands · Names web addresses +1

    MIT · 28.8k repo stars · Updated 10 Jun 2026

  • ad-creative

    alirezarezvani/claude-skills

    When the user needs to generate, iterate, or scale ad creative for paid advertising. Use when they say 'write ad copy,' 'generate headlines,' 'create ad variations,' 'bulk creative,' 'iterate on ads,' 'ad copy validation,' 'RSA headlines,' 'Meta ad copy,' 'LinkedIn ad,' or 'creative testing.' This is pure creative production — distinct from paid-ads (campaign strategy). Use ad-creative when you need the copy, not the campaign plan.

    Pattern check: Nothing flaggedWhat it can touch: Bundles scripts

    MIT · 28.8k repo stars · Updated 10 Jun 2026

  • adversarial-reviewer

    alirezarezvani/claude-skills

    Adversarial code review that breaks the self-review monoculture. Use when you want a genuinely critical review of recent changes, before merging a PR, or when you suspect Claude is being too agreeable about code quality. Forces perspective shifts through hostile reviewer personas that catch blind spots the author's mental model shares with the reviewer.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands

    MIT · 28.8k repo stars · Updated 20 Oct 2026

  • aeo

    alirezarezvani/claude-skills

    Answer Engine Optimization (AEO) skill — optimize content to be cited by AI language models (ChatGPT, Perplexity, Claude, Gemini, Mistral) as authoritative sources. Distinct from SEO — AEO optimizes for citation in LLM-generated responses, not search rankings. Use when planning content for AI-first search audiences, auditing existing content for E-E-A-T signals, tracking which pages get cited by which LLMs, or building a citation-friendly content strategy. Triggers — 'AEO audit', 'optimize for ChatGPT', 'get cited by Perplexity', 'LLM citation strategy', 'answer engine optimization', 'content for AI search', 'E-E-A-T audit'. Output is a markdown audit report (default) or JSON for pipeline integration. Stdlib-only Python tools.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands · Reaches the network +2

    MIT · 28.8k repo stars · Updated 26 Oct 2026

  • agent-decision-receipts

    alirezarezvani/claude-skills

    Mint a tamper-evident, post-quantum-signed receipt for a consequential agent action (deploy, delete, pay, grant-access, model decision) so it can be verified later from the certificate alone. Use when an autonomous agent takes a side-effecting action that may need to be proven later, or when satisfying EU AI Act Article 12 record-keeping. Three decisions: whether an action needs a receipt, minting it, verifying it. Signing is delegated to the open-source OpenAgentOntology package. Not after-the-fact log analysis; not a hosted notary; not a legal opinion.

    Pattern check: Nothing flaggedWhat it can touch: Runs shell commands · Reaches the network +1

    MIT · 28.8k repo stars · Updated 30 Jun 2026

All skills in alirezarezvani/claude-skills