菜单
Builds a precise Ideal Customer Profile for a product. Reads the GTM spec and BUSINESS-CONTEXT.md, then produces a detailed ICP document. Use before outreach, content, or launch work. Auto-invoked by outreach-engine.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Automated security auditing for AI agent code. Scans repos, packages, MCP servers, and installed skills for malicious patterns using eight-phase analysis: install hooks, dangerous code patterns, network exfiltration, credential access, obfuscation, provenance, prompt injection, and skill security. Use when: cloning repos, installing packages, reviewing MCP servers, auditing skills, scanning code before execution, or when asked to check if something is safe, audit code, scan for malware, review dependencies.
Act as a brutally honest McKinsey-level strategy consultant to diagnose the real underlying problems hurting a business's growth, profitability, or traction. Use this skill whenever someone asks to diagnose their business, wants honest feedback on why their business isn't growing, says things like 'what's wrong with my business', 'why isn't this working', 'roast my startup', 'tear apart my business', 'honest assessment', 'brutal feedback', 'diagnose my company', or asks for a strategy consultant perspective. Also trigger when users share a business description and ask what's holding them back.
Identify a founder's biggest blind spots — flawed assumptions, strategic misjudgments, and decisions that feel right but are damaging the business long-term. Use this skill whenever someone asks about their blind spots, wants to know what they're missing, says things like 'what am I not seeing', 'where am I wrong', 'challenge my assumptions', 'play devil's advocate on my business', 'what would I regret in 2 years', 'poke holes in my strategy', or asks for a fresh perspective from someone who's seen startups fail. Also trigger when a founder seems very confident and asks for feedback — confidence is often where blind spots hide.
Identify the single biggest bottleneck preventing faster business growth by examining the offer, audience targeting, distribution channels, messaging, pricing, and funnel structure. Use this skill whenever someone asks why they aren't growing faster, wants to find their growth bottleneck, says things like 'what's limiting our growth', 'why are we stuck', 'we've plateaued', 'growth has stalled', 'how do we grow faster', 'what's the constraint', 'find the bottleneck', 'why aren't we scaling', or describes a business that should be growing but isn't. Also trigger when a founder shares decent traction but frustration about pace.
Evaluate a business idea or offer through the lens of real market demand — is the problem truly painful, the solution compelling, and the positioning differentiated? Use this skill whenever someone asks for a market reality check, wants to validate a business idea, says things like 'is there a market for this', 'will people pay for this', 'is my idea viable', 'validate my concept', 'is this a real problem', 'market validation', 'demand check', 'would you buy this', or shares a new business concept and wants honest market feedback. Also trigger when someone is about to invest significant time or money into an unvalidated idea.
Analyze a product or service offer with ruthless objectivity to determine if the value proposition is strong enough to drive real demand. Use this skill whenever someone asks to evaluate their offer, test their value proposition, says things like 'is my offer good enough', 'rate my offer', 'test my pricing', 'is this compelling', 'would you buy this', 'critique my product', 'evaluate my service', 'offer teardown', 'value prop test', 'is my pricing right', or shares a product/service and wants to know if it will sell. Also trigger when someone is about to launch a new offer, restructuring their pricing, or struggling with low conversion rates that may be offer-related.
| name | icp-builder |
| description | Builds a precise Ideal Customer Profile for a product. Reads the GTM spec and BUSINESS-CONTEXT.md, then produces a detailed ICP document. Use before outreach, content, or launch work. Auto-invoked by outreach-engine. |
Invoke business-context skill first. Requires a GTM spec for this product.
A specific, usable ICP — not a persona cartoon. Something you can filter a LinkedIn search with. Something you can hand to an outreach sequence.
Industry: [specific vertical — not "tech"]
Company size: [headcount or ARR range]
Geography: [country/region — be specific]
Stage: [startup/scaleup/enterprise — not all three]
Tech indicators: [tools they use that signal fit]
Anti-fit: [company types that look right but never buy]
Title: [exact job titles — 2-3, not 10]
Seniority: [IC / manager / director / VP / C-suite]
Department: [function they sit in]
Reports to: [who they answer to]
Owns budget: [yes/no — or "influences"]
Decision maker: [yes/no — or "champion"]
Pain they feel daily: [specific, not generic]
Fear they won't say out loud: [what keeps them up]
What success looks like: [measurable for them]
What they read/watch: [where they get information]
Who they trust: [peers, analysts, communities]
Trigger 1: [event that makes them go looking — be specific]
Trigger 2: [another event]
Signal: [how we would know this trigger just happened]
- [reason this company/person will never buy even if they look like ICP]
- [another disqualifier]
The buyer is not the CISO. The CISO approves budgets. The buyer is the security engineer or DevSecOps lead who:
Trigger: company adopts Claude Code / Cursor / agentic workflows in production. Signal: GitHub shows active Claude Code use, MCP server repos, agent frameworks.
The buyer is not a CTO. The buyer is the operations lead or fund manager who:
Trigger: new platform rollout (Asgard → Hub24 migration), new hire who expects automation, failed audit finding around data reconciliation. Signal: job posting for "investment operations analyst" at a boutique fund manager.
The buyer is an SEO manager or technical founder who:
Trigger: new site launch, Google indexing lag complaint, competitor ranking in AI search. Signal: Google Search Console connected, active blog publishing, technical site.
Save to .nomark/growth/<product>/icp.md. Commit with:
git add .nomark/growth/<product>/icp.md
git commit -m "growth: <product> ICP — $(date '+%Y-%m-%d')"