validate-product

validate-product is a skill for Codex from HoangNguyen0403/agent-skills-standard. It costs 24 tokens per session (1,393 once invoked), scanned A, original, MIT.

A product-validation workflow for testing important business assumptions with bounded experiments and predefined thresholds. It includes authorization checks before experiments run on a host system.

In plain words
What is it for?
It is for designing experiments, evaluating evidence, and classifying product hypotheses as validated, invalidated, or inconclusive.
Why use it?
It helps separate supported findings from guesses and prevents results from being judged by changing standards.

Skill for Codex

Written for Codex: installed under .codex/.

Good fit It is for designing experiments, evaluating evidence, and classifying product hypotheses as validated, invalidated, or inconclusive.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hoangnguyen0403/agent-skills-standard/validate-product
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add HoangNguyen0403/agent-skills-standard --skill validate-product
Clone the repo
git clone --depth 1 https://github.com/HoangNguyen0403/agent-skills-standard

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for validate-product

README.md
[![agentmods](https://agentmods.dev/badge/skills/hoangnguyen0403/agent-skills-standard/validate-product/github.svg)](https://agentmods.dev/skills/hoangnguyen0403/agent-skills-standard/validate-product)
Your own site
<a href="https://agentmods.dev/skills/hoangnguyen0403/agent-skills-standard/validate-product"><img src="https://agentmods.dev/badge/skills/hoangnguyen0403/agent-skills-standard/validate-product/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for validate-product

Your own site · 80×15
<a href="https://agentmods.dev/skills/hoangnguyen0403/agent-skills-standard/validate-product"><img src="https://agentmods.dev/badge/skills/hoangnguyen0403/agent-skills-standard/validate-product.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 24 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,393 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00024 $0.01393
Opus 5.5 $0.00010 $0.00557
Sonnet 5.5 $0.00005 $0.00279
Haiku 4.5 $0.00002 $0.00139

Measured 5d ago against content hash 817494f72f19, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

validate-product scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex/skills/validate-product/SKILL.md · 75 lines

How it starts

The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Validate Product Skill

[!IMPORTANT] Validate critical product assumptions and hypotheses through bounded experiment design, precommitted thresholds, and host authorization gates.

Optional args: slug=, ticket=<id/url>, mode=interactive|autonomous|channel, channel=, auto_continue=true|false, profile=business|hybrid|technical.

Instructions

When the user asks to perform this workflow, execute the following steps:

Validate Product Workflow

Goal: Validate prioritized product hypotheses through bounded experiments and precommitted thresholds, routing validated, invalidated, or inconclusive outcomes honestly.

Steps

  1. Preflight and intake:
    • Preflight: verify product-management/product-evidence, product-management/product-investment, product-management/product-experimentation; conditional product-management/product-metrics only when designing executable measurement. Scripts: scripts/validate-product-evidence.mjs (ordinary <root>/product-management/product-evidence, Kiro <root>/product-management-product-evidence), scripts/evaluate-investment.mjs (ordinary <root>/product-management/product-investment, Kiro <root>/product-management-product-investment). Validator invocation: node <validator> <ledger.json> --authority-root <canonical-root> --as-of <UTC> --gate experiment (and commit before delivery handoff). Calculator invocation: node <calculator> <scenario.json>. Exit: 0 = coherent (structural, readiness not_assessed) or gate eligible for host check only; never authorization; 3 = proposal_only/gap; 1/2/4 = error (never validated). Emit exact gap strings (<pkg> not installed; opt in at a reviewed ref and sync, product-management/product-evidence excluded; opt in at a reviewed ref and sync, validate-product-evidence.mjs missing; repair package, evaluate-investment.mjs missing; repair package, Node >=20 unavailable; calculation not performed) with safe next action; preserve delivery feature_status. See product-evidence Verification Workflow.
    • Intake: slug, scope, critical HYP records, and strategy/learning authority. Qualitative investment is valid; financial script absence doesn't block qualitative analysis.
  2. Design bounded experiment:
    • Define falsifiable EXP: method, target cohort eligibility, sample plan, primary decision metric (MET), guardrails (MET), and precommitted rules (rules: { success, failure, inconclusive }). Never move goalposts after observing data.
    • Predeclare finite bounds: starts_at, ends_at, budget_cap (unsigned decimal string; null cap forbids execution / proposal-only), currency, exposure_cap (safe integer), and stop_rules (host-enforced).
  3. Check authorization and run boundary:
    • Verify experiment authorization: proposal in ledger is NOT host approval. Real live user exposure, spend, or feature activation requires authenticated host/operator control; without it, mark proposal_only (AUTHORIZATION_REQUIRED). Never fabricate authorization or execute spend.
    • Material changes to predictions, queries, guardrails, or budget require a new immutable authorized DEC revision, never mutating an existing recorded decision.
  4. Evaluate results and route:
    • Completed experiments require observed SRC results and limitations. Inspect negative, confounded, and unseasoned evidence.
    • Route outcomes: proposal-only -> recommended next workflow is null with decision_needed requesting host authorization; invalidated -> route to discover-product (pivot) or retro-learn, or null for defer/no-build (never unconditional implementation); inconclusive -> validate-product (bounded follow-up) or null (defer); supported -> route to plan-feature or implementation-readiness ONLY after recorded, current, scoped investment authorize decision with commit-gate eligibility (eligible_for_host_check, which still requires host check).

Read the full file on GitHub · 75 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 75 lines · 24 tokens per session scan A 817494f72f19

Subscribe to this mod's changes

validate-product is a skill published in the GitHub repository HoangNguyen0403/agent-skills-standard (579 stars, last pushed 3d ago), licensed MIT. It adds 24 tokens to every session and 1,393 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-16.

Related

Other skills, from other repositories