Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/konglong87/superpm/pm-technpx skills add konglong87/superPM --skill pm-techgit clone --depth 1 https://github.com/konglong87/superPMWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/konglong87/superpm/pm-tech)<a href="https://agentmods.dev/skills/konglong87/superpm/pm-tech"><img src="https://agentmods.dev/badge/skills/konglong87/superpm/pm-tech.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00057 | $0.02458 |
| Opus 5 | $0.00028 | $0.01229 |
| Sonnet 5 | $0.00011 | $0.00492 |
| Haiku 4.5 | $0.00006 | $0.00246 |
Grade A, and why
pm-tech scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 289 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Preamble (run first)
bash "$(dirname "${BASH_SOURCE[0]}")/../../check-update.sh" 2>/dev/null || true
mkdir -p docs/02-方案设计
echo "📊 正在检查前置文档..."
if [ -f "docs/02-方案设计/PRD产品需求文档.md" ]; then
echo "✅ PRD文档 - 已找到"
else
echo "⏳ PRD文档 - 未找到"
fi
if [ -f "docs/02-方案设计/原型设计方案.md" ]; then
echo "✅ 原型设计方案 - 已找到"
else
echo "⏳ 原型设计方案 - 未找到"
fi
跨 Agent 交互规则
当流程要求与用户交互时:
- 如果当前环境支持 AskUserQuestion,使用 AskUserQuestion(最佳体验)。
- 如果当前环境不支持 AskUserQuestion,必须用普通聊天消息提出同样问题。
- 一次只问一个问题。
- 提问后必须停止当前回合,等待用户回答(STOP and WAIT)。
- 不得在用户回答前生成文档、写入 docs。
- 已有 docs 文件不能替代本轮用户回答。
执行流程
步骤 1: 确定技术对接范围
使用 AskUserQuestion 询问:
您需要哪方面的技术对接支持?
A) 整体技术方案(技术栈、架构、第三方服务) B) 功能可行性评估(评估功能实现难度) C) 接口设计(API接口规划) D) 性能与扩展性(性能要求、扩展方案) E) 其他(请手动输入)
💡 提示:产品规划→整体方案,功能设计→可行性评估,技术评审→接口设计
记录到变量 TECH_SCOPE
步骤 2: 读取前置数据
必需文档:PRD产品需求文档、原型设计方案(需其一) 可选文档:MVP方案、需求调研报告
如果 PRD 不存在:
⚠️ 未找到 PRD 文档
您可以选择: A) 执行 /pm-docs 生成 PRD B) 使用 MVP 方案作为输入 C) 手动输入功能需求(快速模式)
步骤 3: 提取关键需求
从 PRD 提取:功能列表、非功能需求(性能/安全/兼容性)、数据需求 从原型设计提取:交互流程、页面复杂度
步骤 4: 技术方案设计
4.1 技术栈推荐
基于产品需求,推荐以下技术栈:
前端:方案A React+TS+Ant Design / 方案B Vue3+TS+Element Plus / 方案C 小程序原生 后端:方案A Java+Spring Boot+MySQL / 方案B Node.js+Express+MongoDB / 方案C Python+Django+PG / 方案D Go+Gin+MySQL
选择依据:团队熟练度、项目规模、性能要求、开发周期
A) 使用推荐方案 B) 需要调整 C) 已有技术栈约束
4.2 架构设计
📐 推荐架构方案:
- 前端层 → 接入层(Nginx) → 应用服务层 → 数据层
- 核心模块:用户服务、业务服务、数据服务
A) 架构合理,继续 B) 需要调整 C) 我有其他想法
步骤 5: 功能可行性评估
5.1 逐个功能分析
对每个核心功能提交以下评估:
📋 {功能名称}
- 技术实现:前端方案、后端方案、数据存储、第三方依赖
- 难度:⭐简单 / ⭐⭐中等 / ⭐⭐⭐复杂
- 风险:{风险点}
- 建议周期:{预估时间}
A) 继续评估下一个 B) 需要调整这个功能 C) 查看所有评估结果
5.2 高风险功能识别
⚠️ 高风险功能汇总:列出风险项及缓解方案(替代方案/分阶段/引入第三方)
A) 接受推荐方案 B) 需要进一步讨论 C) 调整功能需求降低风险
步骤 6: 接口设计
6.1 核心API规划
🔌 核心API接口:
用户模块:POST /api/auth/login, POST /api/auth/register, GET/PUT /api/user/profile 业务模块:GET /api/products, GET /api/products/{id}, POST /api/cart, POST /api/orders
是否需要详细设计某个接口?
A) 需要详细设计 B) 已经足够 C) 导出Swagger格式
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 289 lines · 57 tokens per session scan A 280c04deda02
pm-tech is a skill published in the GitHub repository konglong87/superPM (60 stars, last pushed 21d ago), licensed MIT. It adds 57 tokens to every session and 2,458 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
deepsafe-scan
Preflight security scanner for AI coding agents — scans deployment config, skills/MCP servers, memory/sessions, and AI agent config files (hooks injection) for secrets, PII, prompt injection, and dangerous patterns. Runs 4 model behavior probes (persuasion, sandbagging, deception, hallucination). Supports LLM-enhanced…
douyin-upload-mcp-skill
通过抖音创作者平台(creator.douyin.com)发布视频和图文内容。首选调用 MCP 工具完成操作,MCP 无法满足时可运行 Skill 脚本兜底。禁止自行启动外部浏览器访问抖音。.
team-tasks
Coordinate multi-agent development pipelines using shared JSON task files. Use when dispatching work across dev team agents (code-agent, test-agent, docs-agent, monitor-bot), tracking pipeline progress, or running sequential/parallel workflows. Covers project init, task assignment, status tracking, agent dispatch via…
multi-search
智能多引擎搜索,自动检测网络环境并按优先级切换:DuckDuckGo -> Tavily -> Bing API -> Bing爬虫。支持自动配额管理和网络缓存。Invoke when user needs web search with automatic engine selection and network adaptation.
meeting-note-summarizer
Turn meeting notes or transcripts into factual summaries, decisions, questions, and action items. Use when a user wants a concise recap or needs explicit owners and deadlines extracted without filling in missing details.
daily-standup-journal
Generate concise daily standups, reflection prompts, and weekly retrospectives for individuals or teams. Use for planning a day, surfacing blockers, reviewing user-provided entries, or drafting a check-in without assuming prior history.