Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add cyj4578/chen-skillshub --skill prd-test-skillsgit clone --depth 1 https://github.com/cyj4578/chen-skillshubWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cyj4578/chen-skillshub/prd-test-skills)<a href="https://agentmods.dev/skills/cyj4578/chen-skillshub/prd-test-skills"><img src="https://agentmods.dev/badge/skills/cyj4578/chen-skillshub/prd-test-skills/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cyj4578/chen-skillshub/prd-test-skills"><img src="https://agentmods.dev/badge/skills/cyj4578/chen-skillshub/prd-test-skills.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.02088 |
| Opus 5 | $0.00030 | $0.01044 |
| Sonnet 5 | $0.00012 | $0.00418 |
| Haiku 4.5 | $0.00006 | $0.00209 |
Grade A, and why
prd-test-skills scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 221 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PRD Test Skills - PRD 测试评审技能
快速开始
当用户需要审查或评审PRD文档时,加载此技能进行系统性检测。你的目标不是只检查“有没有写”,而是用测试、反例和事故复盘视角判断“这样写能不能开发、能不能验收、上线会不会出事”。
触发关键词:审查PRD、评审PRD、检测漏洞、测试PRD、需求评审、PRD质量检查
核心能力
1. 审查维度
| 维度 | 说明 | 检查要点数 |
|---|---|---|
| 结构完整性 | 文档章节是否齐全 | 10 项 |
| 业务真实性 | 问题、目标、收益、优先级是否有依据 | 6 项 |
| 逻辑一致性 | 目标-需求-验收-指标链条是否对齐 | 8 项 |
| 场景完整性 | 用户、角色、流程、状态、异常、边界是否覆盖 | 14 项 |
| 数据与权限 | 埋点、指标、数据口径、权限、安全是否清楚 | 10 项 |
| 可测试性 | 验收标准和测试用例是否可执行 | 7 项 |
| 风险与上线 | 依赖、灰度、回滚、运营、合规是否识别 | 9 项 |
2. 漏洞等级定义
| 等级 | 标识 | 定义 | 影响 |
|---|---|---|---|
| 严重 | P0 | 可能导致资损、隐私/合规事故、核心链路无法闭环、需求无法开发或无法验收 | 必须修复后评审 |
| 重要 | P1 | 影响开发排期、上线质量、核心体验、关键数据判断或跨团队协作 | 强烈建议修复 |
| 一般 | P2 | 异常/边界/状态/角色/指标口径存在遗漏,可能带来返工或线上缺陷 | 建议修复 |
| 提示 | P3 | 表达、格式、示例、补充说明类优化 | 可选修复 |
判级细则见 references/prd-review-checklist.md。
审查流程
Phase 0: 审查前校准
先判断 PRD 类型和风险面:
交易/订单/支付/退款
直播/内容/活动/预约
后台/权限/审批/配置
数据看板/埋点/归因
AI/自动化/推荐/风控
多端/多门店/多角色/跨系统
不同类型必须追加专项清单,见 references/scenario-checklists.md。
Phase 1: 结构扫描与证据检查
检查文档是否包含完整的10个核心章节:
□ 问题陈述
□ 目标
□ 非目标
□ 用户故事
□ 需求详细说明(FR + NFR)
□ 成功指标
□ 开放问题
□ 时间计划
□ 依赖与风险
□ 附录(可选)
不要只判断章节是否存在,还要判断每个关键结论是否有证据:数据来源、用户反馈、历史基线、业务假设、决策原因。
Phase 2: 逻辑链验证
验证以下链条的一致性:
问题陈述 → 目标 → 用户故事(US) → 功能需求(FR) → 验收标准 → 测试用例 → 成功指标(G)
↓ ↓ ↓ ↓
非目标 优先级 状态/权限 埋点/数据口径
Phase 3: 场景穷举推演
对每个核心 FR 至少从 8 类场景反推:
正常路径、异常路径、边界条件、并发冲突、中断恢复、逆向误操作、跨角色协作、跨端/跨系统一致性
如果 PRD 只描述主流程,默认至少标记 P1 或 P2,具体看是否影响核心链路。
Phase 4: 漏洞检测
执行扩展检查清单(详见 references/prd-review-checklist.md),并结合常见漏洞案例(见 references/common-prd-gaps.md)。
Phase 5: 测试用例反推
每个 P0/P1 问题必须反推至少 1 条测试用例或验收用例,说明如果不修复,测试会如何失败。
用例格式见 references/review-report-template.md。
Phase 6: 报告生成
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 221 lines · 60 tokens per session scan A 86b4a9de5c26
prd-test-skills is a skill published in the GitHub repository cyj4578/chen-skillshub (11 stars, last pushed 2mo ago), licensed MIT. It adds 60 tokens to every session and 2,088 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…
next-cache-components-optimizer
Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…
next-partial-prefetching-adoption
Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the partialPrefetching flag, opt routes in with export const prefetch = 'partial', audit Link prefetch={true} behavior, preserve existing prefetched UI with…