Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xl188/XLSkills --skill dev-pm-flowgit clone --depth 1 https://github.com/xl188/XLSkillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xl188/xlskills/dev-pm-flow)<a href="https://agentmods.dev/skills/xl188/xlskills/dev-pm-flow"><img src="https://agentmods.dev/badge/skills/xl188/xlskills/dev-pm-flow/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xl188/xlskills/dev-pm-flow"><img src="https://agentmods.dev/badge/skills/xl188/xlskills/dev-pm-flow.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.03664 |
| Opus 5.5 | $0.00018 | $0.01466 |
| Sonnet 5.5 | $0.00009 | $0.00733 |
| Haiku 4.5 | $0.00005 | $0.00366 |
Grade A, and why
dev-pm-flow scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- **执行中遇难缠 bug → 先建复现闭环**(联动 `systematic-debugging`):失败测试 / curl / 最小复现,要求秒级、确定性、能抓住这个具体 bug;**无闭环不假设**,禁止边猜边改。修前先写回归测试;没有正确的测试接缝时,"没有接缝"本身记入交付说明 How it starts
The opening of the file, as written. The whole thing — 178 lines — stays where its author put it; the contents beside it link to each section on GitHub.
开发 PM 流程
用户提开发需求时,按此流程走。我是 PM 兼执行者,用户是唯一的方案拍板人和最终验收人。
流程总览
① 需求理解 → ② 拆解+方案 → ③ 用户确认 → ④ 执行开发 → ⑤ 自审 → ⑥ 交付过目 → ⑦ 发布/打回
任何一步卡住都可以向上回退。方案未确认,绝不动手。
① 需求理解
- 复述需求,确认我理解对了(一句话说清"做什么、为什么")
- 有歧义直接问,不猜
意图确认(需求含糊 / 非平凡时,先确认意图再进 ②)
用户给的往往是"表面需求"("弄个仪表盘""优化一下"),不是真正想要的。需求含糊、或改动非平凡(多模块 / 跨项目 / 30 分钟以上)时,先用轻量采访把意图锁死:
- 说出当前理解 + 置信度:一句话重述,附 0-100% 置信度;<70% 时补一句"缺什么"(让用户知道要补哪块)
- 关键点一次一问,不批量——用户对假设的反应比对列表快;第三个问题往往依赖第一个的答案
- 拆穿"惯例式回答":用户答得官方/套路("要可扩展""标准做法""干净架构")时,追问一句:"如果不用向任何人交代,你真正想要什么?"——这一句常比前面五句有用
- 用用户的话重述,含六要素:做什么 / 给谁 / 为什么现在 / 怎么算成 / 硬约束 / 明确不做("不做"占错配的一半,必须写)
- 确认要显式"是":"随便你""听起来不错""走吧"都不算确认(那是授权或礼貌退场),需再问"有要修正的吗?"
意图锁死后再进 ② 拆解+方案,方案里的需求原文 = 意图确认的结论(供 Spec 轴对照)。
② 拆解 + 方案
- 读相关代码 / 配置,摸清现状
- 拆成具体任务步骤(改哪些文件、加什么逻辑、什么顺序)
- 垂直切片原则:每张任务票 = 一条贯穿所有层、可独立验证的端到端切片(能单独演示/验收),不是只切一层的水平切片;每张票带验收标准和阻塞关系(blocked by 哪些票;无阻塞的票可立即开工)
- 大重构走 expand-contract(波及全库的机械改动,如改列名/共享类型/迁移):先加新形态与旧形态并存 → 按爆炸半径分批迁移(每批一张票,保持可编译)→ 最后删旧形态。禁止一把梭
- 任务分级:
- 🟢 轻量(单文件 / <10 行 / 配置改动)→ 我直接
patch,不走子代理 - 🟡 中等(2-3 文件 / 新增函数或接口)→ 我自己写,派子代理审查
- 🔴 重型(多文件重构 / 新模块 / 复杂算法)→ 子代理并行开发,或建议上编码 agent
- 🟢 轻量(单文件 / <10 行 / 配置改动)→ 我直接
- 方案输出格式:目标 + 改动清单 + 涉及文件 + 风险点 + 预计改动量
- 跨项目影响检查:后端改了 API → 前端是否要跟着调?数据库改了 → 其他服务是否依赖?方案里必须列出所有受影响的项目/模块
- 数据库变更检查:涉及实体/表结构改动时,方案必须包含 migration 脚本或 SQL 变更语句,不能只改代码不给出库脚本
- 复杂方案写入
<项目根>/.agent/plans/存档(见 ③,直接写文件,不走其他技能)
③ 用户确认
- 方案给用户,等"可以"/"动手"/"确认"
- 用户说改 → 回 ② 调方案
- 没说确认就不动手,可以补充分析但不出代码
方案存档(防上下文丢失)
确认后、执行前,把最终方案写入项目根目录下的 .agent/plans/:
- 路径 =
<项目根>/.agent/plans/YYYY-MM-DD_HHMMSS-<需求slug>.md,如<your-project>/.agent/plans/... - 目录不存在则创建(
mkdir -p .agent/plans);用户主目录(~/.agent)不是存档位置 - 多项目混用统一工作区(如
<workspace-root>)时,若各项目无独立 .agent,可放工作区根,但必须在方案里写清绝对路径,防止 Spec 轴找错 - 内容含:需求原文、改动清单、涉及文件、用户确认的要点。即使会话被压缩或跨天,从文件就能恢复上下文继续执行
④ 执行开发
执行前 Checkpoint
动手改代码前,先创建回滚点:
前置检查:确认工作区只含本次任务的改动。 git status 若发现与本次任务无关的未提交改动(用户或其他任务留下的),先跟用户确认怎么处理(单独 stash / 先提交),不把别人的改动混进 checkpoint——否则 pop 时新旧混杂,回滚点失效。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 178 lines · 46 tokens per session scan A 326bf19c0b1f
dev-pm-flow is a skill published in the GitHub repository xl188/XLSkills (2 stars, last pushed 1mo ago), licensed MIT. It adds 46 tokens to every session and 3,664 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
github-issue-pr-attribs
Standardize GitHub ISSUE and PR metadata (Assignee, Reviewer, Labels, Project, Milestone, Development, Relationship) and ship a strong, well-structured code-review template. Includes ready-to-use issue forms, PR template, and a severity/rubric review model.
handoff-resume
Resume in-progress coding work across sessions from a HANDOFF.md and a dirty git working tree. Use when a task says "continue from HANDOFF.md", "retomar o processamento", or when picking up a repo mid-change with uncommitted edits and an open PR. Covers reading continuity docs, reconciling the real tree, decoding repo…
mural
Créer, lire, modifier et organiser des murals (tableaux de collaboration visuelle mural.co) via l'API Mural — workspaces, rooms, widgets (stickies, formes, textes, images, connecteurs).
github-issues
Create, triage, label, assign GitHub issues via gh or REST.
github-pr-workflow
GitHub PR lifecycle: branch, commit, open, CI, merge.
feature-prioritisation
Aplica marcos de priorización (RICE, MoSCoW, Kano, ICE, Opportunity Scoring) para clasificar características e items del backlog. Úsalo cuando se te pida priorizar características, clasificar un backlog, decidir qué construir a continuación, o evaluar compensaciones entre ideas competidoras. Produce una lista de…