plugins/pm-cross/skills/red-team-review/SKILL.md
Stress-test a plan, strategy, PRD, or launch by simulating hostile expert personas who attack it from every angle. Use when asked to red-team, stress-test, pre-mortem, pressure-test, play devil's advocate, or find the blind spots in a plan before committing. Produces a per-persona critique, a ranked list of the most dangerous risks, a pre-mortem, and the specific changes that would most strengthen the plan.
npx skillsauth add mohitagw15856/pm-claude-skills red-team-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Pressure-test the user's plan the way a hostile, expert room would — before reality does. The goal is not to be negative; it's to surface the failure modes the author is too close to see, then convert them into concrete fixes.
Always deliver the full review even if the plan is thin. Where detail is missing, infer the most likely version from context and the domain, and mark inferred assumptions as (assumed — confirm). Never refuse for lack of detail and never leave bracketed placeholders.
The plan/strategy/PRD/launch to stress-test, plus (if given) the goal, audience, timeline, and constraints. If the objective isn't stated, infer it and say so.
One-sentence restatement of the plan and the outcome it's betting on. (If you had to infer the objective, say so.)
Channel each persona in their own voice. For each: their single sharpest challenge + the one question the plan must answer. Pick the 5–6 most relevant of:
The 3–5 most dangerous gaps, ordered by likelihood × impact. For each: the risk, why it's easy to miss, and an early-warning signal that it's happening.
"It's 12 months later and this failed. Write the post-mortem headline." Give the 2–3 most plausible failure narratives in one or two sentences each.
The specific, prioritised changes that would most reduce risk — what to add, cut, de-risk, or test first. Separate do before committing from monitor after launch.
business
Analyze why deals are won and lost and turn it into an action plan. Use when asked to run a win/loss analysis, review closed-won and closed-lost deals, understand why the team is losing to a competitor, or summarize sales feedback into patterns. Produces a structured win/loss report with themes, win/loss rates by segment and competitor, representative quotes, and prioritized actions for product, marketing, and sales.
development
Route a fuzzy request to the right skill in this library. Use when the user is unsure which skill fits, asks 'which skill should I use for X', describes a task without naming a skill, or when a request could plausibly match several skills. Produces a best-fit recommendation with the inputs to gather, a runner-up with the tie-breaker, and a workflow recipe when the job spans multiple skills.
testing
Triage a vulnerability or scanner finding — assess real severity, exploitability, and how urgently to fix. Use when asked to triage a CVE, prioritize scanner/pentest findings, assess a vuln's risk, or decide what to patch first. Produces a triage verdict: CVSS-informed severity adjusted for your context, exploitability, real risk, a fix/mitigation, and an SLA — so you fix what matters, not just what's red.
development
Stand up a Voice of Customer (VoC) program that turns feedback into action. Use when asked to build a VoC program, design a customer feedback loop, consolidate feedback sources, or set up a closed-loop feedback process. Produces a VoC program design — objectives, feedback sources and channels, a taxonomy, collection and analysis cadence, closed-loop routing, ownership, and success metrics.