product-on-purpose/docs/templates/skill-template
docs/templates/skill-template/SKILL.md
--- name: <phase-or-classification-skill-name> description: <single-line 20-100 word description; include trigger keywords and do not use folded YAML> phase: <discover|define|develop|deliver|measure|iterate> # classification: <foundation|utility> # For non-domain skills, use classification and omit phase version: "1.0.0" updated: <YYYY-MM-DD> license: Apache-2.0 metadata: category: <one of: research, problem-framing, ideation, specification, validation, reflection, coordination> frameworks
$ install --global
skillsauthnpx skillsauth add product-on-purpose/pm-skills docs/templates/skill-templateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 28, 2026, 2:59 AM36.7s3 files scanned
SKILL.md
- name:
- <phase-or-classification-skill-name>
- description:
- <single-line 20-100 word description; include trigger keywords and do not use folded YAML>
- phase:
- <discover|define|develop|deliver|measure|iterate>
- # classification:
- <foundation|utility> # For non-domain skills, use classification and omit phase
- version:
- 1.0.0
- updated:
- <YYYY-MM-DD>
- license:
- Apache-2.0
- category:
- <one of: research, problem-framing, ideation, specification, validation, reflection, coordination>
- frameworks:
- [triple-diamond, lean-startup, design-thinking]
- author:
- product-on-purpose
<!-- PM-Skills | https://github.com/product-on-purpose/pm-skills | Apache 2.0 -->
<Skill Title>
<One paragraph overview of what this skill produces and why it matters.>When to Use
- <Situation 1>
- <Situation 2>
- <Situation 3>
When NOT to Use (Optional)
- <Common misuse to avoid>
- <When another skill is a better fit>
Instructions
When asked to <create artifact>, follow these steps:
-
<Step 1 Title> <What to do and why>
-
<Step 2 Title> <What to do and why>
-
<Step 3 Title> <What to do and why>
-
<Step 4 Title> <What to do and why>
Output Contract
Use references/TEMPLATE.md as the output format. A complete response should:
- <Required element 1>
- <Required element 2>
- <Required element 3>
Quality Checklist
Before finalizing, verify:
- [ ] <Quality criterion 1>
- [ ] <Quality criterion 2>
- [ ] <Quality criterion 3>
Examples
See references/EXAMPLE.md for a completed example.
Related Skills
product-on-purpose/utility-pm-workflow-builder
tools
VerifiedTrustedCommunity
Guides a contributor from a workflow idea to a complete Workflow Implementation Packet (draft workflow file, draft workflow command, cross-cutting update checklist) in a staging area for review. Runs overlap analysis against the existing workflows with a Why Gate, then helps select and sequence skills with authored handoffs. Use when creating a new multi-skill workflow or promoting a repeated ad-hoc chain into a durable one. To build a single skill instead, use utility-pm-skill-builder; to run a sequence without authoring anything, use the chain command or utility-pm-workflow-orchestrator.
287SKILL.mdUpdated Jun 11, 2026
product-on-purpose/utility-pm-workflow-orchestrator
tools
VerifiedTrustedCommunity
Run an ordered sequence of pm-skills against one input, pausing for go/no-go and stopping on a failed or empty step. Accepts a saved prioritized action plan (Mode A) or an ad-hoc named chain (Mode B; the chain command routes here). Explicit invocation only; run --dry-run first while the native path is EXPERIMENTAL. To author a durable workflow instead, use utility-pm-workflow-builder.
287SKILL.mdUpdated Jun 4, 2026
product-on-purpose/utility-pm-skill-auditor
tools
VerifiedTrustedCommunity
Run a repo-wide cross-cutting governance audit via the pm-skill-auditor sub-agent. Aggregates the enforcing validator suite, re-derives aggregate counters, and surfaces cross-cutting issues no single validator catches, graded P0/P1/P2/P3 with a machine-readable status. Use for pre-release readiness checks or a periodic repo health audit.
287SKILL.mdUpdated May 18, 2026
product-on-purpose/utility-pm-release-conductor
tools
VerifiedTrustedCommunity
Walk the guided 6-gate release runbook (G0 readiness, G1 adversarial review, G2 version bump and CHANGELOG, G2.5 commit and re-verify, G3 tag and push, G4 post-tag hygiene) via the pm-release-conductor sub-agent. Refuses gate bypasses and tags only the re-verified SHA. Use when cutting a pm-skills release.
287SKILL.mdUpdated May 18, 2026