superpm

superpm is a skill for Claude Code, Codex from cskwork/oh-my-symphony. It costs 54 tokens per session (2,364 once invoked), scanned A, original, Apache-2.0.

A workflow for producing focused product-management documents and checking them with a separate critic. Product management is the work of deciding what to build, for whom, and why.

In plain words
What is it for?
Create product requirements, strategies, goals, roadmaps, specifications, research summaries, analytics plans, release notes, retrospectives, pricing work, or positioning documents.
Why use it?
It helps turn a product question into the smallest useful document while exposing unsupported claims and hidden assumptions. It avoids adding planning frameworks that do not help with the decision.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions subagents.

Good fit Create product requirements, strategies, goals, roadmaps, specifications, research summaries, analytics plans, release notes, retrospectives, pricing work, or positioning documents.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/cskwork/oh-my-symphony/superpm
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add cskwork/oh-my-symphony --skill superpm
Clone the repo
git clone --depth 1 https://github.com/cskwork/oh-my-symphony

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for superpm

README.md
[![agentmods](https://agentmods.dev/badge/skills/cskwork/oh-my-symphony/superpm/github.svg)](https://agentmods.dev/skills/cskwork/oh-my-symphony/superpm)
Your own site
<a href="https://agentmods.dev/skills/cskwork/oh-my-symphony/superpm"><img src="https://agentmods.dev/badge/skills/cskwork/oh-my-symphony/superpm/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for superpm

Your own site · 80×15
<a href="https://agentmods.dev/skills/cskwork/oh-my-symphony/superpm"><img src="https://agentmods.dev/badge/skills/cskwork/oh-my-symphony/superpm.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 54 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,364 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00054 $0.02364
Opus 5.5 $0.00022 $0.00946
Sonnet 5.5 $0.00011 $0.00473
Haiku 4.5 $0.00005 $0.00236

Measured 2d ago against content hash 090b66b3f89b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

superpm scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 3 executable files (scripts/shoot.sh, templates/workspace-data-common.js, templates/workspace-data-module.js), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

src/symphony/factory/bundled_skills/superpm/SKILL.md · 131 lines

How it starts

The opening of the file, as written. The whole thing — 131 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/superpm - one PM request, a verified artifact

One PM ask -> capture intent -> diverge by domain -> the smallest useful artifact -> an independent critic checks it against the framework and the real decision -> stop.

68 PM frameworks live in reference/; this file routes the ask and names the loop. For a one-paragraph note you could write directly, skip the skill.

Principles

  • Serve the real decision. Name the decision the artifact drives before drafting; a framework filled in for its own sake is waste.
  • Smallest useful artifact. Only the frameworks the decision needs - no bolted-on SWOT/persona/roadmap when the ask was one pricing call.
  • Ground claims in evidence. Numbers, quotes, segments come from the user's data, docs, or named assumptions - never invented. Market/customer claims: pull real signal via reference/signal.md (read-only, keyless) before asserting.
  • Surface hidden assumptions. The critic names unstated assumptions and missing pieces as risks - never present an assumption as fact.
  • Ask only when genuinely ambiguous. Read the repo/docs/data first; interview only load-bearing, user-only choices (reference/intent.md).
  • Hard stops. Irreversible or outward-facing actions (publish, send, post, share externally) need explicit consent.
  • Trace the chain. EXECUTE -> FLOW -> STORYBOARD -> PACKAGE share the 기능명세 (SPEC) as one source of truth (reference/model.md); a flow node or screen callout with no SPEC is never invented. Derived artifacts come from the spec, not beside it.

Intent capture - signal to domain

Read the request and route to one domain (the artifact named usually decides it). When the ask spans domains, pick the primary deliverable and pull supporting frameworks from the others. When the ask is to plan a buildable thing end-to-end (기획하자 / 개발하고 싶어, no single artifact named), route to PLAN - a stepped session over the chain, not one artifact (reference/plan.md).

Signal in the request Domain Reference
기획하자 / 이거 개발하고 싶어 / 기획 도와줘 / plan this feature end-to-end / PRD부터 화면까지 PLAN (session) reference/plan.md
brainstorm ideas / risky assumptions / opportunity tree / prioritize features / customer interview / metrics DISCOVER reference/discover.md
product strategy / vision / value proposition / lean or business model / monetization / pricing / SWOT / PESTLE / Porter / Ansoff STRATEGY reference/strategy.md
PRD / OKRs / roadmap / sprint plan / retro / pre-mortem / user or job stories / stakeholder map / prioritization framework / red-team a plan EXECUTE reference/execute.md
user flow / 유저플로우 / flowchart / screen-to-screen flow / 화면 흐름 / 분기·상태 전이 FLOW reference/flow.md
화면설계서 / 기능명세 / 스토리보드 / screen design doc / screen spec / wireframe / UI spec STORYBOARD reference/storyboard.md
implementation package / 구현 패키지 / 통합 산출물 번들 / export bundle / hand off to devs PACKAGE reference/package.md
personas / segments / customer journey / market sizing (TAM/SAM/SOM) / competitor analysis / sentiment RESEARCH reference/research.md
SQL from a question / cohort analysis / A/B test read-out ANALYTICS reference/analytics.md
go-to-market / beachhead / ICP / growth loops / GTM motion / battlecard GTM reference/gtm.md
marketing ideas / positioning / value-prop statements / product name / North Star metric GROWTH reference/growth.md
review or tailor a resume / draft an NDA or privacy policy / proofread TOOLKIT reference/toolkit.md
document an AI-built app / shipping artifacts / intended-vs-implemented gap AI-SHIP reference/ai-ship.md

Read the full file on GitHub · 131 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 131 lines · 54 tokens per session scan A 090b66b3f89b

Subscribe to this mod's changes

superpm is a skill published in the GitHub repository cskwork/oh-my-symphony (35 stars, last pushed today), licensed Apache-2.0. It adds 54 tokens to every session and 2,364 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-18.