skills/shape-up-analysis/SKILL.md
Analyze a Shape Up pitch document alongside a codebase to identify risks, rabbit holes, and unknowns. Produces comprehensive kickoff analysis with bet confidence rating. Use when asked to "analyze this pitch", "review Shape Up pitch", "kickoff analysis", "identify risks in this pitch", "what are the rabbit holes", "assess this bet", "prepare project kickoff", "evaluate this pitch", or when starting a new Shape Up cycle and need to understand scope vs codebase reality.
npx skillsauth add tachun/shape-up-analysis-skills shape-up-analysisInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Analyze Shape Up pitches against actual codebase to produce comprehensive kickoff documents with risk assessment and confidence rating.
Load as needed for detailed guidance:
references/shape-up-methodology.md - Shape Up concepts, pitch anatomy, betting criteriareferences/risk-assessment.md - Risk categorization, rabbit hole identification, confidence scoringreferences/codebase-analysis.md - Systematic code review approach, health signals, impact mappingSee for expected quality:
examples/example-pitch.md - Well-formed Shape Up pitchexamples/example-output.md - Complete analysis output demonstrating format and depthIf pitch not provided, ask user before proceeding.
Analyze as both Senior PM and Senior Developer:
PM lens:
Dev lens:
Principles:
Generate project-kickoff-analysis.md:
# Project Kickoff – Pitch & Codebase Analysis
## 1. Project Summary (TL;DR)
One paragraph: problem, why now, who benefits. No jargon.
---
## 2. Understanding the Problem (PM View)
### 2.1 Problem Statement
- Real user/business problem?
- Clearly defined or solution disguised as problem?
### 2.2 Why Now?
- What triggered this pitch?
- Cost of not doing this?
### 2.3 Success Criteria
- How we know it worked
- What's measurable
- What's "good enough"
---
## 3. Proposed Solution (Critical Review)
### 3.1 Solution Overview
- Proposed solution summary
- Explicitly in scope
- Explicitly out of scope
### 3.2 Assumptions
| Assumption | Type | Status |
|------------|------|--------|
| Description | Technical/Product/User | ✅/⚠️/❓ |
---
## 4. Risks & Rabbit Holes
### 4.1 Known Risks
| Risk | Likelihood | Impact | Mitigation |
|------|------------|--------|------------|
| Description | H/M/L | H/M/L | Strategy |
### 4.2 Potential Rabbit Holes
List with concrete examples:
- What looks simple but isn't
- What could explode in scope
- Hidden dependencies
---
## 5. Codebase Review (Dev View)
### 5.1 High-Level Architecture
Brief tech stack overview relevant to this pitch.
### 5.2 Relevant Areas
| Area | Why It Matters | Confidence |
|------|---------------|------------|
| `path/to/module` | Reason | 👍/😐/🚨 |
**Legend:** 👍 Well understood, 😐 Needs exploration, 🚨 High risk
### 5.3 Code Health Signals
- Test coverage by area
- Complexity hotspots
- Technical debt markers
- Documentation gaps
---
## 6. Constraints & Boundaries
### 6.1 Time Box
- Fixed appetite: X weeks
- Must fit vs. can drop
### 6.2 Technical Constraints
- Required/forbidden tech
- Performance/security limits
---
## 7. Open Questions
| Question | Type | Can Proceed? | Risk if Unanswered |
|----------|------|--------------|-------------------|
| Specific question | Product/Tech/Data | Yes/No | Low/Med/High |
---
## 8. Bet Confidence
**Overall: ⭐⭐⭐☆☆** (X/5)
**Positive factors:**
- List
**Negative factors:**
- List
**What would increase confidence:**
- List
**What would kill the bet:**
- List
---
## 9. Suggested Next Steps
### Spikes to Run
- [ ] Spike name (timebox): Specific question to answer
### Experiments to Validate
- [ ] Experiment: What to test
### Decisions Needed Before Building
- [ ] Decision: What needs resolving
---
## 10. Final Notes
- Uncomfortable truths
- Trade-offs we're accepting
Before finalizing output:
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
development
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
development
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
development
End-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.