Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add echoVic/boss-skill --skill requirement-penetrationgit clone --depth 1 https://github.com/echoVic/boss-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/echovic/boss-skill/requirement-penetration)<a href="https://agentmods.dev/skills/echovic/boss-skill/requirement-penetration"><img src="https://agentmods.dev/badge/skills/echovic/boss-skill/requirement-penetration.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00045 | $0.01547 |
| Opus 5 | $0.00023 | $0.00773 |
| Sonnet 5 | $0.00009 | $0.00309 |
| Haiku 4.5 | $0.00005 | $0.00155 |
Grade A, and why
pm/requirement-penetration scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
需求穿透方法论
适用场景
当用户提出需求时，不要直接接受表面描述。使用本方法论深度挖掘用户真正想要什么，识别用户没说出口的需求，甚至发现用户自己都没意识到的需求。
核心方法
需求分层模型
用户需求分为四个层次，从下到上价值递增：
┌─────────────────┐
│ 惊喜需求 │ ← 超出预期，带来 "Wow"
│ (Delighters) │
├─────────────────┤
│ 潜在需求 │ ← 用户尚未意识到
│ (Latent) │
├─────────────────┤
│ 隐性需求 │ ← 用户想到但未说
│ (Implicit) │
├─────────────────┤
│ 显性需求 │ ← 用户明确表达
│ (Explicit) │
└─────────────────┘
四层需求定义：
-
显性需求：用户明确表达的需求
- 直接从用户原话中提取
- 这是需求分析的起点，不是终点
-
隐性需求：用户想到但未表达的需求
- 用户认为"理所当然"而没说的
- 用户不好意思说的
- 用户以为你会知道的
-
潜在需求：用户尚未意识到但会需要的需求
- 基于场景推演发现的需求
- 基于竞品分析发现的需求
- 基于行业趋势预判的需求
-
惊喜需求：超出用户预期、能带来 "Wow" 体验的需求
- 创新性的功能或体验
- 让用户感到"这个太棒了！"
- 这是产品差异化的关键
5W2H 深度追问
对每个需求，系统性地追问以下7个维度：
| 维度 | 问题 | 目的 |
|---|---|---|
| What | 用户说的是什么？背后真正想要的是什么？ | 识别真实需求 |
| Why | 为什么需要这个？解决什么问题？ | 理解动机 |
| Who | 谁会用？在什么场景下用？ | 明确用户 |
| When | 什么时候用？频率如何？ | 理解场景 |
| Where | 在哪里用？环境如何？ | 理解上下文 |
| How | 现在怎么解决的？有什么痛点？ | 发现机会 |
| How much | 愿意付出多少？（时间/金钱/学习成本） | 评估价值 |
追问技巧：
- 至少追问 "为什么" 5次，直到触及根本动机
- 不要满足于第一个答案
- 关注用户的情绪和语气，往往隐藏着真实需求
需求优先级矩阵
基于价值和成本，将需求分为4个优先级：
高价值
│
┌──────┼──────┐
│ 必做 │ 优先 │
│ P0 │ P1 │
低成本 ────┼──── 高成本
│ 可做 │ 谨慎 │
│ P2 │ P3 │
└──────┼──────┘
│
低价值
- P0（必做）：高价值 + 低成本 = 必须做
- P1（优先）：高价值 + 高成本 = 优先做
- P2（可做）：低价值 + 低成本 = 可以做
- P3（谨慎）：低价值 + 高成本 = 暂不做
输出要求
完成需求穿透后，应输出以下内容（通常作为PRD的第2章）：
2. 需求穿透分析
2.1 用户原始需求
[用户的原始表述，保持原话]
2.2 需求穿透
显性需求（用户明确表达的）
| 需求 | 用户原话 | 解读 |
|---|---|---|
| [需求 1] | "[原话]" | [你的解读] |
| [需求 2] | "[原话]" | [你的解读] |
隐性需求（用户想到但未表达的）
| 需求 | 推断依据 | 为什么重要 |
|---|---|---|
| [需求 1] | [依据] | [重要性] |
| [需求 2] | [依据] | [重要性] |
潜在需求（用户尚未意识到的）
| 需求 | 洞察来源 | 预期价值 |
|---|---|---|
| [需求 1] | [来源] | [价值] |
| [需求 2] | [来源] | [价值] |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 161 lines · 45 tokens per session scan A 0f781911ea36
pm/requirement-penetration is a skill published in the GitHub repository echoVic/boss-skill (553 stars, last pushed yesterday), licensed MIT. It adds 45 tokens to every session and 1,547 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
large-workspace-handling
To partition large workspaces (100+ files) into scoped subagent tasks when context is insufficient.
example-skill
Example skill template used for the CreateHub template. You should never use this skill directly as it is just a template made to be updated.
color-expert
Use when working with color naming, color theory, color spaces, color definitions, or any task involving color knowledge - palettes, ramps, gradients, conversions, accessibility, perceptual matching, pigment mixing, print-vs-screen color, CSS color syntax, or historical color terminology. Use this skill whenever the…
skill-scorer
A review tool for Agent Skills, which are instruction files that guide coding agents. It supports skills made for Cursor, Claude, and OpenClaw.
business-idea-evaluator
Objectively evaluates business ideas through 18 independent subagents, evidence grading, probabilistic modeling, and Business Reality Score (BRS). Use when the user asks to evaluate, validate, score, or stress-test a business idea, startup concept, side project, SaaS idea, or monetization plan. Always use for business…
should-i-build
Multi-agent market validation skill. Spawns 6 parallel research analysts (Community uses last30days for fresh 30-day signal; Claim Verifier uses deep-research for fact-checking) and delivers a BUILD / CONDITIONAL / PIVOT / STOP verdict with a 7-pillar scorecard. Use when user says "should I build this", "/sib"…