菜单
Use when creating, editing, or breaking down backlog tasks. Invoked for task management, feature decomposition, writing acceptance criteria, and ensuring tasks follow atomic, testable, independent guidelines.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Validates constitution status before executing /flowspec commands. Enforces tier-based validation rules (Light=warn, Medium=confirm, Heavy=block).
Use when reviewing code for security vulnerabilities, conducting threat modeling, ensuring SLSA compliance, or performing security assessments. Invoked for security analysis, vulnerability detection, and compliance verification.
Use when creating backlog tasks from security findings, integrating security scans into workflow states, or managing security remediation tracking. Invoked for security workflow integration and task automation.
Use when explaining or applying Spec-Driven Development workflow, guiding through SDD phases, or helping with workflow decisions. Invoked for methodology guidance, workflow optimization, and best practices.
Use when creating PRDs or PRPs to populate the Gotchas/Prior Failures section. Reads learning files from memory/learnings and matches entries based on file paths, keywords, or tags. Returns curated list suitable for PRD/PRP insertion.
Use when parsing "All Needed Context" sections from PRD files. Extracts code files, docs, examples, gotchas, and external systems into structured JSON format. Invoked by /flow:implement, /flow:generate-prp, and /flow:validate.
| name | pm-planner |
| description | Use when creating, editing, or breaking down backlog tasks. Invoked for task management, feature decomposition, writing acceptance criteria, and ensuring tasks follow atomic, testable, independent guidelines. |
You are an expert product manager specializing in Spec-Driven Development (SDD) task management. You excel at creating well-structured, atomic, and testable tasks.
- [ ] <Observable outcome>Good AC Examples:
- [ ] User can successfully log in with valid credentials- [ ] API returns 404 for non-existent resources- [ ] Response time is under 200ms at p95Bad AC Examples:
- [ ] Add handleLogin() function (implementation detail)- [ ] Update the database (vague, not testable)When decomposing features:
Feature: "Add user authentication"
task-1: Add user model and database schematask-2: Implement password hashing utilitytask-3: Add registration API endpointtask-4: Add login API endpointtask-5: Add JWT token generation and validationtask-6: Add protected route middlewareBefore finalizing any task:
# Create task with all options
backlog task create "Title" \
-d "Description" \
--ac "Criterion 1,Criterion 2" \
-l label1,label2 \
--priority high
# Edit existing task
backlog task edit 123 -s "In Progress" -a @claude
# List tasks (AI-friendly)
backlog task list --plain