Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add swan-gtm/gtm-skills --skill meddpicc-gap-auditgit clone --depth 1 https://github.com/swan-gtm/gtm-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/swan-gtm/gtm-skills/meddpicc-gap-audit)<a href="https://agentmods.dev/skills/swan-gtm/gtm-skills/meddpicc-gap-audit"><img src="https://agentmods.dev/badge/skills/swan-gtm/gtm-skills/meddpicc-gap-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/swan-gtm/gtm-skills/meddpicc-gap-audit"><img src="https://agentmods.dev/badge/skills/swan-gtm/gtm-skills/meddpicc-gap-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00189 | $0.01980 |
| Opus 5 | $0.00095 | $0.00990 |
| Sonnet 5 | $0.00038 | $0.00396 |
| Haiku 4.5 | $0.00019 | $0.00198 |
Grade A, and why
meddpicc-gap-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 59 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Use this skill when a deal is coming up for a forecast call, a stage change, when someone asks what's actually missing on it, or after a new call or email that might change qualification. Input: one or more meeting transcripts or email threads for the deal — this skill has nothing to work from without at least one. The deal's current CRM/qualification field values are optional, supplied separately, and used only for reconciliation, not as the primary input. Produces a per-component status — verified, unverified, or confirmed risk — for every MEDDPICC/MEDDIC component, each backed by the exact evidence that produced it.
The play
- Start from the meeting transcript(s) or email thread(s) supplied for this deal — that's the material everything else is extracted from. If the deal's current qualification data (CRM fields, a deal doc, notes) was also supplied, note it as the baseline to reconcile against later; if it wasn't, say so explicitly rather than silently skipping reconciliation.
- Read the transcripts/emails and map language to each MEDDPICC component (Metrics, Economic Buyer, Decision Criteria, Decision Process, Paper Process, Identify Pain, Champion, Competition) as you go. For every mapping, quote the exact line or lines that justify it. A paraphrase is not a citation.
- If more than one transcript or email is supplied for the deal, order them chronologically before mapping anything. Where a component has evidence in more than one source, the most recent statement is the current status — unless it actually reverses an earlier one (a champion's enthusiasm cooling, a budget that was confirmed becoming unconfirmed). A reversal is a finding in its own right — cite both the earlier and later statements rather than quietly keeping only the newer one. Added detail that doesn't conflict (a second call naming specific frameworks after a first call named compliance generally) is enrichment, not a reversal — no flag needed.
- Before mapping anything from a transcript, resolve who's speaking. See
references/speaker-attribution.mdfor the fallback chain — domain metadata, then contact-list match, then a content-cue guess that must be confirmed before use. When a CRM connection is available, its own contact and owner records for the deal are usually the strongest source for the contact-list rung — check there before falling back to a guess. - For every mapping, check that the speaker actually matches the side the component expects — a seller describing their own product is not evidence of the buyer's pain, need, or criteria, even when the topic overlaps. Discard or re-flag any mapping that fails this check rather than citing it anyway.
- If CRM/qualification values were supplied in step 1, reconcile each mapped value against the existing value for that component: does the source material support it, contradict it, or say nothing? Where the CRM is blank and the source speaks directly to that component, that's a fillable gap with the citation already attached. Where the CRM and the source disagree, surface the disagreement explicitly — never quietly overwrite one with the other — and say what kind of disagreement it is: a hard factual conflict (a number, a name) is a different problem than a qualitative maturity mismatch (a status claim the source doesn't support). Apply the same defensibility check to the CRM's existing value, too — a vague entry doesn't get a pass just because nothing in the source material contradicts it. If no CRM values were supplied, skip this step and say so in the output rather than presenting the extraction as a reconciled audit.
- Grade every component on two separate axes: is it defensible (a real citation exists, not a restated field or a paraphrase), and is the actual answer favorable. A well-cited "no budget confirmed" is defensible but still a real risk — flag it as a confirmed risk, not a data gap, and never let a good citation round an unfavorable answer up to verified.
- Cross-check gap severity against deal stage. A missing component early on is routine. The same gap at a mature stage — verbal commit, contract-out — is urgent; surface it as a stage/qualification mismatch on its own, not folded quietly into the individual component's score.
- If a live CRM connection exists, the default is still to only report — a connection is not permission. Only if the person running this skill explicitly asks to update the CRM, go field by field: show the field name, its current value, the proposed new value, and the citation behind it, and get explicit confirmation on that specific change before writing it. Let them skip any field they don't want touched. Never write a value that has no citation behind it, even on request — say it's unconfirmed instead of writing it.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 59 lines · 189 tokens per session scan A 21698cbc5d01
meddpicc-gap-audit is a skill published in the GitHub repository swan-gtm/gtm-skills (150 stars, last pushed 2d ago), licensed MIT. It adds 189 tokens to every session and 1,980 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Pipedrive Automation
Automate Pipedrive CRM workflows including deal management, pipeline tracking, and sales reporting.
huashu-bento-insight
OpenDesign vs closed cloud design tools: a side-by-side displacement case on control, cost (BYOK), and lock-in. Built as a decision-grade B2B sales deck for evaluation committee.
html-ppt-product-launch
OpenDesign Teams: a launch-and-adoption proposal for a mid-market design team weighing a switch from closed cloud tools. Built as a decision-grade B2B sales deck for design team lead, IT.
afrexai-lead-hunter
Enterprise-grade B2B lead generation, enrichment, scoring, and outreach sequencing for AI agents. Find ideal prospects, enrich with verified data, score against your ICP, and generate personalized outreach — all autonomously.
deliverability-monitoring
Monitor outbound deliverability health across domains, inboxes, DNS, bounces, spam placement, reply rates, and reputation signals. Produces alert thresholds, dashboard spec, weekly QA checklist, and remediation playbook. Use when inboxing drops, bounce rates rise, campaigns underperform, or new infrastructure launches.
icp-scoring
Score and tier ICP-fit accounts using firmographic, technographic, intent, pain, and timing signals. Produces a weighted ICP scorecard, tiering rules, anti-ICP exclusions, routing thresholds, and validation checklist. Use when defining target accounts, ranking TAM lists, prioritizing ABM accounts, or building fit…