pm-selfcheck

pm-selfcheck is a skill for Claude Code from konglong87/superPM. It costs 49 tokens per session (2,147 once invoked), scanned B, original, MIT.

A maintenance check for the super-pm skills package, covering its metadata, file sizes, document paths, version file, and search-tool availability.

In plain words
What is it for?
Use it to audit the health of super-pm skills and verify that their metadata, package version, referenced folders, and search support are in order.
Why use it?
It helps find missing configuration, oversized or unusually short skill files, inconsistent documentation paths, and unavailable search dependencies. It is not intended for carrying out product-management work.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: reads .claude/ paths; names the AskUserQuestion tool; built for openclaw.

Part of the super-pm plugin — 55 skills, 1 hook shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/konglong87/superpm/pm-selfcheck
Any agent
npx skills add konglong87/superPM --skill pm-selfcheck
Clone the repo
git clone --depth 1 https://github.com/konglong87/superPM

Made for: Claude Code.

Or install super-pm, the plugin that ships this one along with the rest of its 55 skills, 1 hook.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for pm-selfcheck

README.md
[![agentmods](https://agentmods.dev/badge/skills/konglong87/superpm/pm-selfcheck.svg)](https://agentmods.dev/skills/konglong87/superpm/pm-selfcheck)
Your own site
<a href="https://agentmods.dev/skills/konglong87/superpm/pm-selfcheck"><img src="https://agentmods.dev/badge/skills/konglong87/superpm/pm-selfcheck.svg" alt="Measured on agentmods" height="20"></a>
Per session 49 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,147 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00049 $0.02147
Opus 5 $0.00024 $0.01073
Sonnet 5 $0.00010 $0.00429
Haiku 4.5 $0.00005 $0.00215

Measured 6d ago against content hash eb93fd439d85, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade B, and why

pm-selfcheck scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

"$HOME/.claude/settings.json"; do
skills/00-tools/pm-selfcheck/SKILL.md · 237 lines

How it starts

The opening of the file, as written. The whole thing — 237 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Preamble

bash "$(dirname "${BASH_SOURCE[0]}")/../../check-update.sh" 2>/dev/null || true
# selfcheck 检查项 1/2/3/5 均需 PKG_ROOT 定位技能包根目录
SKILL_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")" 2>/dev/null && pwd)" || true
PKG_ROOT="$(cd "$SKILL_ROOT" && while [ "$PWD" != "/" ]; do [ -f VERSION ] && { pwd; break; }; cd ..; done)"
echo "🔍 pm-selfcheck v1.0"
echo "正在扫描 super-pm 健康状态..."
echo ""

检查项

1. 元数据完整性

扫描所有 SKILL.md,检查:

  • name: 字段是否缺失
  • description: 字段是否缺失
  • allowed-tools: 字段是否缺失
  • VERSION 文件是否存在且格式正确

2. 体积检查

评级 范围 状态
⚠️ 超大 > 600行 需要拆分
✅ 标准 200-600行 健康
⚠️ 薄弱 < 100行 需要补充

3. 文档路径一致性

扫描所有 docs/ 引用,检查:

  • 中文路径:docs/01-需求调研/docs/02-方案设计/
  • 英文路径:docs/01-demand-insight/
  • 是否存在引用异常(如根目录 docs/xxx.md

4. 搜索依赖检测

检查搜索增强工具是否可用:

echo "=== 4. 搜索依赖检测 ==="

# AnySearch skill 检测
ANYSEARCH_FOUND=false
for candidate in \
  "$HOME/.claude/skills/anysearch/scripts/anysearch_cli.py" \
  "$HOME/.opencode/skills/anysearch/scripts/anysearch_cli.py" \
  "$HOME/.openclaw/skills/anysearch/scripts/anysearch_cli.py" \
  "$HOME/.cursor/skills/anysearch/scripts/anysearch_cli.py" \
  "$HOME/.anysearch/scripts/anysearch_cli.py"; do
  if [ -f "$candidate" ]; then
    ANYSEARCH_FOUND=true
    echo "✅ AnySearch: 已安装 ($candidate)"
    break
  fi
done
if [ "$ANYSEARCH_FOUND" = false ]; then
  echo "❌ AnySearch: 未安装(搜索将降级到 Exa MCP / WebSearch)"
  echo "   安装: git clone https://github.com/konglong87/anysearch.git ~/.claude/skills/anysearch"
fi

# Exa MCP 检测(检查 settings.json 中是否配置了 mcpServers.exa)
EXA_FOUND=false
for settings_file in \
  ".claude/settings.json" \
  "$HOME/.claude/settings.json"; do
  if [ -f "$settings_file" ] && grep -q '"exa"' "$settings_file" 2>/dev/null; then
    EXA_FOUND=true
    echo "✅ Exa MCP: 已配置 ($settings_file)"
    break
  fi
done
if [ "$EXA_FOUND" = false ]; then
  echo "❌ Exa MCP: 未配置(搜索将降级到 WebSearch)"
  echo "   配置: 在 .claude/settings.json 中添加 mcpServers.exa"
fi

# WebSearch 始终可用
echo "✅ WebSearch: 内置兜底,始终可用"

Read the full file on GitHub · 237 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 237 lines · 49 tokens per session scan B eb93fd439d85

Subscribe to this mod's changes

pm-selfcheck is a skill published in the GitHub repository konglong87/superPM (61 stars, last pushed 2d ago), licensed MIT. It adds 49 tokens to every session and 2,147 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

multi-search

智能多引擎搜索,自动检测网络环境并按优先级切换:DuckDuckGo -> Tavily -> Bing API -> Bing爬虫。支持自动配额管理和网络缓存。Invoke when user needs web search with automatic engine selection and network adaptation.

Nex-ZMH/Agent-websearch-skill · 60 tokens

freeride

Manages free AI models from OpenRouter for OpenClaw. Automatically ranks models by quality, configures fallbacks for rate-limit handling, and updates openclaw.json. Use when the user mentions free AI, OpenRouter, model switching, rate limits, or wants to reduce AI costs.

Shaivpidadi/FreeRide · 63 tokens

deepsafe-scan

Preflight security scanner for AI coding agents — scans deployment config, skills/MCP servers, memory/sessions, and AI agent config files (hooks injection) for secrets, PII, prompt injection, and dangerous patterns. Runs 4 model behavior probes (persuasion, sandbagging, deception, hallucination). Supports LLM-enhanced…

XiaoYiWeio/deepsafe-scan · 120 tokens

mapick

Mapick — Skill recommendation & privacy protection for OpenClaw. Scans your local skills, suggests what you're missing, and keeps other skills from seeing your sensitive data.

mapick-ai/mapick · 37 tokens

douyin-upload-mcp-skill

通过抖音创作者平台(creator.douyin.com)发布视频和图文内容。首选调用 MCP 工具完成操作,MCP 无法满足时可运行 Skill 脚本兜底。禁止自行启动外部浏览器访问抖音。.

WJZ-P/douyin-upload-mcp-skill · 67 tokens

team-tasks

Coordinate multi-agent development pipelines using shared JSON task files. Use when dispatching work across dev team agents (code-agent, test-agent, docs-agent, monitor-bot), tracking pipeline progress, or running sequential/parallel workflows. Covers project init, task assignment, status tracking, agent dispatch via…

win4r/team-tasks · 88 tokens