Home / konglong87 / superpm · GitHub

pm-evidence-audit SKILL.md skillA

pm-evidence-audit from konglong87/superpm is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add konglong87/superpm/pm-evidence-audit@git:20260924.0fc202e

Pins git:20260924.0fc202e in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: konglong87/superpm
Path: skills/00-tools/pm-evidence-audit/SKILL.md
Versions recorded: 1
Latest version: git:20260924.0fc202e, committed Sep 24, 2026
Size: 3,606 bytes
Repository stars: 86
License: MIT

Use when: 审核产品调研、市场分析、增长报告或 PRD 中的关键结论是否有可追溯证据，核对来源、日期、推断与冲突 Do NOT use when: 只需评审 PRD 的完整性和表达（用 pm-prd-review）、仅需撰写新报告而非审查现有主张.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# PM 证据审计

本 skill 审的是**结论与证据之间的支持关系**，不是替用户改写业务判断。`pm-prd-review` 负责文档结构、可行性、验收标准；本 skill 检查“市场规模、用户痛点、竞品功能、增长效果”等主张是否真的被来源支持。正式判定请按同目录的 [`references/rubric.md`](references/rubric.md)；该文件随单技能安装，不依赖完整技能包。

## 输入与边界

- 接受用户给出的报告、片段、可访问的文档路径或资料链接。没有材料时，只问一条最关键的问题：要审哪份材料或哪些结论？
- 默认**只读并在聊天中报告**：不默认写入、修改或覆盖源文件。用户明确要保存时再确认输出路径和覆盖风险。
- 用户说**不联网**时，只用已提供材料；禁止联网、不要把外部来源写成“已核实”。资料不可访问、需要登录或无权限时如实标注，不能编造来源、数据、访谈或截图。
- 不向第三方上传用户的内部材料。必要的检索仅针对公开、非敏感主张；若环境没有搜索工具，停止外部核验并说明局限。

## 审计流程

1. **界定范围**：列出会影响产品决策的关键主张，按在原文中的位置编号 `CLAIM-001`、`CLAIM-002`……；长文先审高影响结论，不假装全文已覆盖。把原话、指标口径、时间/地区/人群记清楚。
2. **追踪证据**：逐条找主张引用的原始资料，核对作者/机构、发布日期或数据采集日期、原始值与定义。来源存在**不等于**它支持当前主张；转述文章、摘要和推断需回溯到可访问的原始材料。用户允许联网且工具可用时才进一步核验；不得凭搜索摘要宣称看过全文。
3. **处理矛盾与推断**：有可信来源冲突时并列双方和口径差异，不能挑一个支持自己结论的来源；因果、外推和预测要拆出前提。按 rubric 的固定状态常量判定，给出“为何如此”及无法确认的地方。
4. **汇报下一步**：对高影响且证据薄弱的主张给出最小的下一步验证动作和责任人建议。审计不能自动把 `UNVERIFIED` 改成 `VERIFIED`，也不自动修改用户原文。

## 输出格式

先写审计范围、检查时间、是否联网和未覆盖部分。随后输出可追溯表：

| 主张 ID / 原文位置 | 主张摘要 | 状态 | 来源与日期 | 依据和局限 | 决策影响 | 下一步验证动作 |
|---|---|---|---|---|---|---|
| CLAIM-001 / §2 | … | UNVERIFIED | 未提供；不可假设 | 无法找到支持该口径的数据 | 高 | 请提供原始报告或调整措辞 |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add konglong87/superpm/pm-evidence-audit@sha256:17efafd476be0939

The line at the top of this page pins the label git:20260924.0fc202e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_3i46hx7ujeie3lau.svg)](https://markdownregistry.com/a/art_3i46hx7ujeie3lau)

7 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Sep 24, 2026.

version	committed	commit	size	audit
git:20260924.0fc202e latest	2026-09-24	0fc202e	3,606 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (3606 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

konglong87/superpm · 86 stars · license MIT · pushed 2026-10-26 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_3i46hx7ujeie3lau
GET https://markdownregistry.com/api/v1/resolve?ref=konglong87/superpm/pm-evidence-audit
GET https://markdownregistry.com/api/v1/blob/17efafd476be09395e6d70dab543a8a6b24250873f8ec4e9858d646eb44b2503

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.