pm-claude-skills 29.1.0 → 29.2.0

package/README.md

@@ -4,7 +4,7 @@
   </a>
 </p>
 
-# 🧠 PM Skills — 222 Professional Agent Skills for Claude, ChatGPT, Gemini, Cursor, Codex & Hermes
+# 🧠 PM Skills — 232 Professional Agent Skills for Claude, ChatGPT, Gemini, Cursor, Codex & Hermes
 
 [![Stars](https://img.shields.io/github/stars/mohitagw15856/pm-claude-skills?style=social)](https://github.com/mohitagw15856/pm-claude-skills/stargazers)
 [![npm](https://img.shields.io/npm/v/pm-claude-skills?logo=npm&color=cb3837)](https://www.npmjs.com/package/pm-claude-skills)
@@ -14,7 +14,7 @@
 [![MCP](https://img.shields.io/badge/MCP-registry-0098FF?logo=modelcontextprotocol&logoColor=white)](https://github.com/mohitagw15856/pm-claude-skills#-use-it-anywhere--the-ai-ecosystem)
 [![Remote MCP](https://img.shields.io/badge/ChatGPT%20%C2%B7%20Claude.ai-connector-10A37F)](mcp-remote/)
 [![Smithery](https://smithery.ai/badge/mohit15856/pm-skills)](https://smithery.ai/servers/mohit15856/pm-skills)
-[![Skills](https://img.shields.io/badge/skills-222-blue)](https://github.com/mohitagw15856/pm-claude-skills)
+[![Skills](https://img.shields.io/badge/skills-232-blue)](https://github.com/mohitagw15856/pm-claude-skills)
 [![eval](https://img.shields.io/badge/eval--scored-196%20%C2%B7%20avg%204.8%2F5-brightgreen)](https://mohitagw15856.github.io/pm-claude-skills/leaderboard.html)
 [![Subagents](https://img.shields.io/badge/subagents-4-blueviolet)](agents/)
 [![Commands](https://img.shields.io/badge/slash%20commands-6-blueviolet)](commands/)
@@ -30,22 +30,22 @@
 
 <p align="center">
   <a href="https://mohitagw15856.github.io/pm-claude-skills/">
-    <img src="https://readme-typing-svg.demolab.com?font=Inter&weight=600&size=24&pause=900&color=D97757&center=true&vCenter=true&width=720&lines=222+pro+AI+skills;PRDs%2C+roadmaps%2C+launches+%E2%80%94+done+right;Run+any+one+free+in+your+browser" alt="PM Skills" />
+    <img src="https://readme-typing-svg.demolab.com?font=Inter&weight=600&size=24&pause=900&color=D97757&center=true&vCenter=true&width=720&lines=232+pro+AI+skills;PRDs%2C+roadmaps%2C+launches+%E2%80%94+done+right;Run+any+one+free+in+your+browser" alt="PM Skills" />
   </a>
 </p>
 
-> **Generic AI gives you filler. These give you the structure a senior pro actually uses** — PRDs, exec updates, launch plans, postmortems — as open-source `SKILL.md` files. Across **22 professions**, not just product management. One source, every AI tool.
+> **Generic AI gives you filler. These give you the structure a senior pro actually uses** — PRDs, exec updates, launch plans, postmortems — as open-source `SKILL.md` files. Across **23 professions**, not just product management. One source, every AI tool.
 
 > **🆕 Now plugs into your stack** — automate skills in **[n8n](connectors/n8n.md)**, build apps on **[Lovable](connectors/lovable.md)**, and run them in your **[Obsidian](connectors/obsidian.md)** vault, all via a read-only **[REST API](mcp-remote/#rest-api-for-n8n-lovable-make-any-http-tool)** on the hosted Worker.
 
 ### ⭐ If this saves you time, [star the repo](https://github.com/mohitagw15856/pm-claude-skills) — it's the #1 way to help others find it.
 
 > **PM stands for Professional, not just Product Management.**
-> 222 professional skills + 4 agent templates across 30 bundles covering 22 professions. Built for Claude Code — and now portable to ChatGPT, Gemini, and Hermes Agent. Built by a PM, used by everyone.
+> 232 professional skills + 4 agent templates across 31 bundles covering 23 professions. Built for Claude Code — and now portable to ChatGPT, Gemini, and Hermes Agent. Built by a PM, used by everyone.
 
 A community-built library of professional skills for every field — product management, engineering, customer success, marketing, social media, writers, design, legal, finance, HR, sales, operations, research, and more. Each skill is a structured `SKILL.md` file that teaches an AI assistant how to produce professional-grade outputs for your workflows. Skills run natively in **Claude Code** and **Hermes Agent** (same open `SKILL.md` standard), and ship as ready-to-paste exports for **ChatGPT** and **Gemini** — see [Works With](#-works-with--cross-tool-compatibility).
 
-**🆕 Latest release (v29.1.0 — 15 new skills + composable recipes):** two new bundles ship the library's biggest gaps — **AI/ML Engineering** (`model-card`, `ai-eval-plan`, `rag-design-doc`, `agent-spec`, `dataset-datasheet`, `ai-feature-prd`, `llm-cost-latency-budget`) and **Growth/Marketing** (`marketing-funnel-plan`, `lifecycle-crm-plan`, `paid-acquisition-plan`, `growth-experiment-backlog`, `retention-loop-design`, `referral-program-design`, `messaging-framework`, `conversion-rate-optimization`). Plus **two new [Workflow Recipes](WORKFLOWS.md)** that chain them end-to-end ("Launch an AI Feature", "Grow a Product") — now **loadable right in the [Workflow Canvas](https://mohitagw15856.github.io/pm-claude-skills/canvas.html)** and **Brain-aware**. The memory+action moat also deepened: **18 skills are now brain-aware** and `action-runner` gained explicit **GitHub / Linear / Slack / Notion / Email / Calendar** targets with per-action risk gating. *Earlier (v29.0 — Multilingual + a polished experience):* run any skill in **10 languages** (Spanish, Mandarin, Hindi, Arabic — with RTL — Portuguese, French, German, Japanese, Russian, Indonesian); the frameworks are universal, so the model localizes the whole output. Plus a **[15-page Practical Guide](web/guide.html)** and a **[one-page cheatsheet](CHEATSHEET.md)** (PDF/PNG), a **navigation + playground UX revamp** (a repo link from the playground, sticky nav, a redesigned home), and quality hardening — **[case studies](CASE_STUDIES.md)**, opt-in 👍/👎 feedback, and a CI **regression gate** that blocks score drops. *Earlier (v28.4 — run it free, no credit card):* the playground no longer needs a paid key to start. Use a **free Google AI Studio key** (no card, ~30 seconds) or pick **In-browser** to run a model with **no key at all** (WebLLM on WebGPU — fully private, nothing leaves your device), and every skill now shows a **pre-generated sample output** so you can see the value with zero setup. Plus the **[Professional Brain is now in the browser](https://mohitagw15856.github.io/pm-claude-skills/brain.html)** — a 🧠 Brain page that feeds your durable memory into every run and saves outcomes back. *Earlier (v28.3 — the Professional Brain):* skills gained a durable, local markdown **memory** they read before answering, **write back** to (provenance-tagged, approval-gated), and even **act on** (open tickets/post updates via `action-runner`, dry-run + approval). Set it up in 5 minutes — **[Quickstart](BRAIN_QUICKSTART.md)** · [architecture](BRAIN.md). *Recent integrations:* **[n8n](connectors/n8n.md)**, **[Lovable](connectors/lovable.md)**, **[Obsidian](connectors/obsidian.md)** + a read-only **REST API** (`/v1`) on the hosted Worker. *Earlier (v28.0):* every channel is now shipped & public — **[`pip install pm-skills`](https://pypi.org/project/pm-skills/)** (LangChain/CrewAI), the **hosted MCP connector** `https://pm-skills-mcp.pm-claude-skills.workers.dev/` (add to **ChatGPT/Claude.ai/Cursor** by URL), and the **[official MCP registry](https://github.com/mohitagw15856/pm-claude-skills/blob/main/server.json)** listing. See the new **[🌍 Use It Anywhere](#-use-it-anywhere--the-ai-ecosystem)** section. Also: **multi-model playground** (run any skill with your own **Claude / OpenAI / Gemini / Ollama** key — local models included), a **[remote MCP connector](mcp-remote/)** (add PM Skills to **ChatGPT, Claude.ai & Cursor** with one URL — no install), the MCP server now exposes skills as **prompts + resources**, **4 new IDE targets** (Cline, Continue, Zed, Roo — 9 platforms total), a **[Python package](python/)** (`pip install pm-skills` → LangChain/CrewAI tools), an **[`llms.txt`](https://mohitagw15856.github.io/pm-claude-skills/llms.txt)** for agent discovery, a reusable **[score-skills GitHub Action](.github/actions/score-skills/)**, and **MCP-registry manifests**. Plus the full library is now **eval-scored: 196 skills, avg 4.8/5**. **222 skills**. See the [changelog](#-changelog).
+**🆕 Latest — v29.2.0 (Compliance pack + C-suite + Personas):** a new **[Compliance & Trust](PERSONAS.md) bundle** for regulated/enterprise teams — `soc2-readiness`, `gdpr-compliance`, `hipaa-safeguards`, `iso-27001-isms`, `vendor-security-review`, `data-retention-policy` — and here's the twist: **every one ships a stdlib scoring script** (computed readiness, not vibes). Plus a **C-suite decision pack** (`decision-memo`, `strategy-memo`, `board-pre-read`, `capital-allocation`) and **[curated role Personas](PERSONAS.md)** — each role gets a skill loadout + a recipe + a subagent. **232 skills across 31 bundles.** → **[Full release history & notes](https://github.com/mohitagw15856/pm-claude-skills/releases)**.
 
 ### ▶ See it in action — [try the live Skill Playground](https://mohitagw15856.github.io/pm-claude-skills/)
 
@@ -74,17 +74,17 @@ A community-built library of professional skills for every field — product man
 | 🔭 [Competitor Teardown](skills/competitor-teardown) | "what are rivals up to?" | a positioning map, feature gaps & strategy |
 | 📝 [Meeting Notes](skills/meeting-notes) | a raw transcript | decisions, owners & next steps |
 
-→ Want proof first? See [**real sample outputs**](https://mohitagw15856.github.io/pm-claude-skills/examples.html) from each skill. Like what you see? [**Install in 2 minutes**](#-quick-install-2-minutes) · [browse all 222 skills](#️-all-222-skills) · [**⭐ star the repo**](https://github.com/mohitagw15856/pm-claude-skills/stargazers) so others find it.
+→ Want proof first? See [**real sample outputs**](https://mohitagw15856.github.io/pm-claude-skills/examples.html) from each skill. Like what you see? [**Install in 2 minutes**](#-quick-install-2-minutes) · [browse all 232 skills](#️-all-232-skills) · [**⭐ star the repo**](https://github.com/mohitagw15856/pm-claude-skills/stargazers) so others find it.
 
 ---
 
 ## 📄 One-page cheatsheet
 
-The whole library on one page — install, all 222 skills by profession, the Professional Brain, the REST API, integrations, and quality tooling. Great to **print, share, or drop into a slide**.
+The whole library on one page — install, all 232 skills by profession, the Professional Brain, the REST API, integrations, and quality tooling. Great to **print, share, or drop into a slide**.
 
 <p align="center">
   <a href="CHEATSHEET.md">
-    <img src="web/docs-assets/cheatsheet.png" width="80%" alt="PM Skills one-page cheatsheet — 222 skills, the Professional Brain, REST API, integrations, and tooling at a glance." />
+    <img src="web/docs-assets/cheatsheet.png" width="80%" alt="PM Skills one-page cheatsheet — 232 skills, the Professional Brain, REST API, integrations, and tooling at a glance." />
   </a>
 </p>
 
@@ -110,13 +110,13 @@ Generic AI forgets everything between sessions, so you re-paste context forever
 
 ## 🔄 One library, the whole professional workflow
 
-These 222 skills aren't a random catalog — they cover the **full arc of professional work**, end to end. Wherever you are in the loop, there's a skill for it:
+These 232 skills aren't a random catalog — they cover the **full arc of professional work**, end to end. Wherever you are in the loop, there's a skill for it:
 
 ```mermaid
 flowchart LR
     A(["🔍 Discover"]) --> B(["🎯 Decide"]) --> C(["🔨 Build"]) --> D(["🚀 Ship"]) --> E(["📊 Measure"]) --> F(["📣 Communicate"])
     F -. "feeds the next discovery" .-> A
-    classDef s fill:#1d222b,stroke:#d97757,color:#e7ebf0;
+    classDef s fill:#1d232b,stroke:#d97757,color:#e7ebf0;
     class A,B,C,D,E,F s;
 ```
 
@@ -129,7 +129,7 @@ flowchart LR
 | **📊 Measure** | Track outcomes & analyse | `metrics-framework` · `cohort-analysis` · `ab-test-planner` · `churn-analysis` |
 | **📣 Communicate** | Report up and out | `executive-update` · `board-deck-narrative` · `stakeholder-update` · `qbr-deck` |
 
-> New here? Start with the [**top-tier skills**](#️-skill-tiers--start-with-the-strongest), or jump straight to [**all 222 skills**](#️-all-222-skills) grouped by profession.
+> New here? Start with the [**top-tier skills**](#️-skill-tiers--start-with-the-strongest), or jump straight to [**all 232 skills**](#️-all-232-skills) grouped by profession.
 
 ---
 
@@ -227,7 +227,7 @@ Most skill repos are a folder of prompts. This one is a **system** — measured,
 
 | | **PM Skills** | Typical skill repo |
 |---|:---:|:---:|
-| Skills | **222**, across 22 professions | a handful → dozens, usually one domain |
+| Skills | **232**, across 23 professions | a handful → dozens, usually one domain |
 | Quality | **eval-scored** on a rubric + a public [benchmark](https://mohitagw15856.github.io/pm-claude-skills/benchmark.html) | trust the README |
 | Improves itself | ✅ eval → critique → rewrite (kept only if it scores higher) | ✗ |
 | Grounded in frameworks | ✅ each cites its source (RICE, JTBD, Pyramid Principle…) | rarely |
@@ -252,7 +252,7 @@ Most skill repos are a folder of prompts. This one is a **system** — measured,
 - [📦 Plugin Directory](#-plugin-directory)
 - [🤖 Building Blocks for Agent Templates](#-building-blocks-for-agent-templates)
 - [🏷️ Skill Tiers — start with the strongest](#️-skill-tiers--start-with-the-strongest)
-- [🗂️ All 222 Skills](#️-all-222-skills)
+- [🗂️ All 232 Skills](#️-all-232-skills)
 - [📋 Changelog](#-changelog)
 - [🤝 Contributing](#-contributing--add-your-skill)
 - [🔗 Related Projects](#-related-projects)
@@ -261,13 +261,13 @@ Most skill repos are a folder of prompts. This one is a **system** — measured,
 
 ## 🚀 Quick Install (2 minutes)
 
-**With the [`skills`](https://github.com/vercel-labs/skills) CLI** (the open agent-skills installer that works across Claude Code, Cursor, Codex, OpenCode & 60+ agents) — pick from all 222 interactively:
+**With the [`skills`](https://github.com/vercel-labs/skills) CLI** (the open agent-skills installer that works across Claude Code, Cursor, Codex, OpenCode & 60+ agents) — pick from all 232 interactively:
 
 ```bash
 npx skills add mohitagw15856/pm-claude-skills            # browse & pick (auto-detects your agent)
 npx skills add mohitagw15856/pm-claude-skills --list     # just preview the catalog
 npx skills add mohitagw15856/pm-claude-skills --skill prd-template   # grab one
-npx skills add mohitagw15856/pm-claude-skills --skill '*'            # install all 222
+npx skills add mohitagw15856/pm-claude-skills --skill '*'            # install all 232
 ```
 
 **Or our own installer** — via the [`pm-claude-skills`](https://www.npmjs.com/package/pm-claude-skills) npm package (Windows/macOS/Linux, needs Node), which also installs subagents, slash commands & cross-tool exports:
@@ -276,7 +276,7 @@ npx skills add mohitagw15856/pm-claude-skills --skill '*'            # install a
 npx pm-claude-skills add --agent claude     # or: codex · cursor · hermes · openclaw
 ```
 
-**Or one-line MCP** — make all 222 skills + 5 workflow recipes available in *every* session of any MCP client (Claude Code, Claude Desktop, Cursor, Windsurf), no per-file install:
+**Or one-line MCP** — make all 232 skills + 5 workflow recipes available in *every* session of any MCP client (Claude Code, Claude Desktop, Cursor, Windsurf), no per-file install:
 
 ```bash
 claude mcp add pm-skills -- npx -y pm-claude-skills-mcp
@@ -333,7 +333,7 @@ ln -s ~/pm-claude-skills/skills/* ~/.claude/skills/
 
 ## 🌍 Use It Anywhere — the AI Ecosystem
 
-The same 222 skills reach you through every channel — pick whatever fits your stack:
+The same 232 skills reach you through every channel — pick whatever fits your stack:
 
 | Channel | Get it |
 |---|---|
@@ -347,7 +347,7 @@ The same 222 skills reach you through every channel — pick whatever fits your
 | 🖥️ **IDE rules** | Generated exports for **Cursor, Windsurf, Aider, Cline, Continue, Zed, Roo** — [`exports/`](exports/) |
 | 🤖 **Agents & answer engines** | [`llms.txt`](https://mohitagw15856.github.io/pm-claude-skills/llms.txt) makes the whole library discoverable & citable |
 
-> **196 of 222 skills are eval-scored, averaging 4.8/5** — see the [leaderboard](https://mohitagw15856.github.io/pm-claude-skills/leaderboard.html).
+> **196 of 232 skills are eval-scored, averaging 4.8/5** — see the [leaderboard](https://mohitagw15856.github.io/pm-claude-skills/leaderboard.html).
 
 > 🧠 **Give your skills memory:** the [Professional Brain](BRAIN.md) is a local markdown folder skills read, write back to, and act on. It's a folder + one file to start — **[5-minute Quickstart](BRAIN_QUICKSTART.md)**.
 
@@ -364,7 +364,7 @@ There are two kinds of support. **Native `SKILL.md` agents** read the file as-is
 auto-discover skills from the `description` frontmatter. **Other tools** take the markdown
 body as a system prompt — for those we ship ready-made [exports](#ready-to-use-exports).
 
-**In your editor (VS Code / Cursor):** the [**`vscode-extension/`**](vscode-extension/) brings all 222 skills into the Command Palette — search and *insert a skill as context* for Copilot/Cursor chat, copy it, or open it in the Playground.
+**In your editor (VS Code / Cursor):** the [**`vscode-extension/`**](vscode-extension/) brings all 232 skills into the Command Palette — search and *insert a skill as context* for Copilot/Cursor chat, copy it, or open it in the Playground.
 
 | Platform | How it works | Auto-trigger? |
 |---|---|---|
@@ -509,7 +509,7 @@ ANTHROPIC_API_KEY=sk-ant-… npx pm-claude-skills generate --from ./team-process
 
 **🏆 Skill Leaderboard — [evals](evals/).** An LLM-as-judge harness scores each skill across Claude models on structure, completeness, usefulness, and grounding. **[View the leaderboard →](https://mohitagw15856.github.io/pm-claude-skills/leaderboard.html)**
 
-> **Score the *whole* library, cheaply.** `npm run eval:gen-cases` writes a representative input for **all 222 skills** (curated cases kept verbatim; the rest auto-generated), then `npm run eval:all` runs the full pass on Haiku for **~$2** total. The weakest scorers can then be auto-rewritten with **`npm run improve -- <skill>`** (`/improve`), which keeps a change only if the score goes up.
+> **Score the *whole* library, cheaply.** `npm run eval:gen-cases` writes a representative input for **all 232 skills** (curated cases kept verbatim; the rest auto-generated), then `npm run eval:all` runs the full pass on Haiku for **~$2** total. The weakest scorers can then be auto-rewritten with **`npm run improve -- <skill>`** (`/improve`), which keeps a change only if the score goes up.
 
 ---
 
@@ -585,7 +585,7 @@ Not sure which plugin to install? Here's what each one covers:
 
 On May 5, 2026, Anthropic [released their first agent templates](https://www.anthropic.com/news/finance-agents) — pre-packaged Claude agents that combine **skills, connectors, and subagents** into ready-to-run workflows for financial services.
 
-This library is the largest open-source collection of professional skills available — covering 20 professions beyond financial services. **The 222 skills here are the building blocks for agent templates outside of finance.**
+This library is the largest open-source collection of professional skills available — covering 20 professions beyond financial services. **The 232 skills here are the building blocks for agent templates outside of finance.**
 
 ### What is an agent template?
 
@@ -664,11 +664,10 @@ More templates will follow. If you want to contribute one, see the [template con
 
 ## 📋 Changelog
 
-**Latest: v28.1.0 — Integrations (n8n, Lovable, Obsidian) + a `/v1` REST API.** PM Skills now runs inside [n8n](connectors/n8n.md), powers [Lovable](connectors/lovable.md) apps, and lives in your [Obsidian](connectors/obsidian.md) vault — all backed by a read-only REST API on the hosted Worker (auto-deployed via a new GitHub Action). Builds on **v28.0.0 — live across the whole AI ecosystem.** Now public on every channel: **PyPI** (`pip install pm-skills`), a **hosted MCP connector** URL for ChatGPT/Claude.ai/Cursor, and the **official MCP registry** — plus a new **🌍 Use It Anywhere** section + PyPI/MCP header badges. Builds on the v27 ecosystem work: multi-model playground (Claude / OpenAI / Gemini / **Ollama**); a **remote MCP connector** ([`mcp-remote/`](mcp-remote/)) to add PM Skills to **ChatGPT, Claude.ai & Cursor** by URL; MCP server now serves skills as **prompts + resources**; **4 new IDE export targets** (Cline, Continue, Zed, Roo → 9 platforms); a **Python package** ([`python/`](python/), `pip install pm-skills` with LangChain/CrewAI adapters); an **`llms.txt`** for agent discovery; a reusable **[score-skills Action](.github/actions/score-skills/)**; and **MCP-registry manifests** (`server.json`, `smithery.yaml`). The full library is now eval-scored — **196 skills, avg 4.8/5**. Builds on **v26.0.0** (the Creator stack). **222 skills** across **30 bundles**, **22 professions**.
+**Latest: v29.1.0 — AI/ML + Growth skill packs, composable recipes, a deeper Brain.** 232 skills across 31 bundles, 23 professions. Every tagged release has complete notes on the **[Releases page](https://github.com/mohitagw15856/pm-claude-skills/releases)**.
 
 Full [Keep a Changelog](https://keepachangelog.com/)-format history — every release back to the start — is in **[CHANGELOG.md](CHANGELOG.md)**.
 
-→ Earlier releases (v20 and before — the road from 6 to 222 skills) are in **[CHANGELOG.md](CHANGELOG.md)**.
 
 ---
 
@@ -704,7 +703,7 @@ This repo was built alongside a published 16-part article series on Medium.
 
 ## 🏷️ Skill Tiers — Start With the Strongest
 
-A 222-skill library doesn't have 222 equally-mature skills, and pretending otherwise
+A 232-skill library doesn't have 232 equally-mature skills, and pretending otherwise
 wastes your time. Skills are tiered honestly so you can start with the best work:
 
 - 🟢 **Production-Ready (50)** — battle-tested, stable output, used in real work. Includes the three skills with computed Python helpers (sprint planning, RICE, customer health). **Start here.**
@@ -717,7 +716,7 @@ If you're new, install `pm-essentials` and try a couple of Production-Ready skil
 
 ---
 
-## 🗂️ All 222 Skills
+## 🗂️ All 232 Skills
 
 Every skill, grouped by profession. **[Browse the full per-skill catalog → SKILLS.md](SKILLS.md)** · **[searchable live catalog](https://mohitagw15856.github.io/pm-claude-skills/catalog.html)** · **[run any skill in the browser](https://mohitagw15856.github.io/pm-claude-skills/)**
 
@@ -751,7 +750,7 @@ Every skill, grouped by profession. **[Browse the full per-skill catalog → SKI
 
 ## ❤️ Sponsor This Work
 
-Building and maintaining 222 skills across 30 bundles takes real time — testing skills against new model releases, building new ones from community requests, writing the article series, and keeping documentation current.
+Building and maintaining 232 skills across 31 bundles takes real time — testing skills against new model releases, building new ones from community requests, writing the article series, and keeping documentation current.
 
 If these skills save you time at work — or you're a company that wants your logo in front of the PMs, engineers, and operators who use them daily — **[become a sponsor →](https://github.com/sponsors/mohitagw15856)** (or [☕ buy me a coffee](https://www.buymeacoffee.com/mohit15856)).
 

package/exports/README.md

@@ -8,7 +8,7 @@ by hand; edit the source skill and run:
 node scripts/build-exports.mjs
 ```
 
-Currently exporting **222 skills** to:
+Currently exporting **232 skills** to:
 
 - **ChatGPT — Custom GPT instructions** → `exports/chatgpt/`
 - **Google Gemini — Gem instructions** → `exports/gemini/`

package/exports/aider/README.md

@@ -3,7 +3,7 @@
 > Auto-generated from `skills/*/SKILL.md` by `scripts/build-exports.mjs`.
 > **Do not edit these files by hand** — edit the source skill and regenerate.
 
-222 skills exported. Copy a `.mdc rule` into the tool to use it.
+232 skills exported. Copy a `.mdc rule` into the tool to use it.
 
 | Skill | Bundle | Path |
 |---|---|---|
@@ -25,9 +25,11 @@
 | Architecture Decision Record (ADR) | `pm-engineering` | `pm-engineering/architecture-decision-record/architecture-decision-record.md` |
 | Assumption Mapper | `pm-discovery` | `pm-discovery/assumption-mapper/assumption-mapper.md` |
 | Board Deck Narrative | `pm-business` | `pm-business/board-deck-narrative/board-deck-narrative.md` |
+| Board Pre-Read | `pm-business` | `pm-business/board-pre-read/board-pre-read.md` |
 | Budget Variance Analysis | `pm-finance` | `pm-finance/budget-variance-analysis/budget-variance-analysis.md` |
 | Cap Table Explainer | `pm-founders` | `pm-founders/cap-table-explainer/cap-table-explainer.md` |
 | Capacity Planning | `pm-engineering` | `pm-engineering/capacity-planning/capacity-planning.md` |
+| Capital Allocation | `pm-business` | `pm-business/capital-allocation/capital-allocation.md` |
 | Change Management Plan | `pm-hr` | `pm-hr/change-management-plan/change-management-plan.md` |
 | Changelog Generator | `pm-engineering` | `pm-engineering/changelog-generator/changelog-generator.md` |
 | Chart Data Extractor | `pm-data` | `pm-data/chart-data-extractor/chart-data-extractor.md` |
@@ -60,10 +62,12 @@
 | Data Analysis Standard | `pm-analytics` | `pm-analytics/data-analysis-standard/data-analysis-standard.md` |
 | Data Pipeline Spec | `pm-data` | `pm-data/data-pipeline-spec/data-pipeline-spec.md` |
 | Data Quality Audit | `pm-data` | `pm-data/data-quality-audit/data-quality-audit.md` |
+| Data Retention Policy | `pm-compliance` | `pm-compliance/data-retention-policy/data-retention-policy.md` |
 | Database Migration Plan | `pm-engineering` | `pm-engineering/database-migration-plan/database-migration-plan.md` |
 | Database Schema Design | `pm-engineering` | `pm-engineering/database-schema-design/database-schema-design.md` |
 | Dataset Datasheet | `pm-ai` | `pm-ai/dataset-datasheet/dataset-datasheet.md` |
 | Debugging Log Analyser | `pm-engineering` | `pm-engineering/debugging-log-analyser/debugging-log-analyser.md` |
+| Decision Memo | `pm-business` | `pm-business/decision-memo/decision-memo.md` |
 | Demand Letter | `pm-legal` | `pm-legal/demand-letter/demand-letter.md` |
 | Dependency Audit | `pm-engineering` | `pm-engineering/dependency-audit/dependency-audit.md` |
 | Dependency Conflict Resolver | `pm-engineering` | `pm-engineering/dependency-conflict-resolver/dependency-conflict-resolver.md` |
@@ -100,11 +104,13 @@
 | Financial Model Narrative | `pm-finance` | `pm-finance/financial-model-narrative/financial-model-narrative.md` |
 | Founder-Market Fit | `pm-founders` | `pm-founders/founder-market-fit/founder-market-fit.md` |
 | Fundraising FAQ | `pm-founders` | `pm-founders/fundraising-faq/fundraising-faq.md` |
+| GDPR Compliance | `pm-compliance` | `pm-compliance/gdpr-compliance/gdpr-compliance.md` |
 | Git Troubleshooter | `pm-engineering` | `pm-engineering/git-troubleshooter/git-troubleshooter.md` |
 | Go-To-Market | `pm-gtm` | `pm-gtm/go-to-market/go-to-market.md` |
 | Go-to-Market Planner | `pm-delivery` | `pm-delivery/go-to-market-planner/go-to-market-planner.md` |
 | Grant Proposal | `pm-cross` | `pm-cross/grant-proposal/grant-proposal.md` |
 | Growth Experiment Backlog | `pm-growth` | `pm-growth/growth-experiment-backlog/growth-experiment-backlog.md` |
+| HIPAA Safeguards | `pm-compliance` | `pm-compliance/hipaa-safeguards/hipaa-safeguards.md` |
 | Hiring Rubric | `pm-people` | `pm-people/hiring-rubric/hiring-rubric.md` |
 | Hook Writer | `pm-creator` | `pm-creator/hook-writer/hook-writer.md` |
 | IEP Goal Support | `pm-education` | `pm-education/iep-goal-support/iep-goal-support.md` |
@@ -115,6 +121,7 @@
 | Investor Cold Email | `pm-founders` | `pm-founders/investor-cold-email/investor-cold-email.md` |
 | Investor Pitch Deck | `pm-finance` | `pm-finance/investor-pitch-deck/investor-pitch-deck.md` |
 | Investor Update | `pm-business` | `pm-business/investor-update/investor-update.md` |
+| ISO 27001 ISMS | `pm-compliance` | `pm-compliance/iso-27001-isms/iso-27001-isms.md` |
 | Job Application | `pm-business` | `pm-business/job-application/job-application.md` |
 | Job Description Writer | `pm-hr` | `pm-hr/job-description-writer/job-description-writer.md` |
 | Job Story Mapper | `pm-discovery` | `pm-discovery/job-story-mapper/job-story-mapper.md` |
@@ -195,6 +202,7 @@
 | Short-Form Script | `pm-creator` | `pm-creator/short-form-script/short-form-script.md` |
 | Skill Security Auditor | `pm-engineering` | `pm-engineering/skill-security-auditor/skill-security-auditor.md` |
 | SLO and Error Budget | `pm-engineering` | `pm-engineering/slo-error-budget/slo-error-budget.md` |
+| SOC 2 Readiness | `pm-compliance` | `pm-compliance/soc2-readiness/soc2-readiness.md` |
 | Social Ad Campaign | `pm-social` | `pm-social/social-ad-campaign/social-ad-campaign.md` |
 | Social Media Audit | `pm-social` | `pm-social/social-media-audit/social-media-audit.md` |
 | Social Media Strategy | `pm-gtm` | `pm-gtm/social-media-strategy/social-media-strategy.md` |
@@ -207,6 +215,7 @@
 | Stakeholder Update | `pm-essentials` | `pm-essentials/stakeholder-update/stakeholder-update.md` |
 | Startup Idea Validator | `pm-founders` | `pm-founders/startup-idea-validator/startup-idea-validator.md` |
 | Strategic Narrative Generator | `pm-strategy` | `pm-strategy/strategic-narrative-generator/strategic-narrative-generator.md` |
+| Strategy Memo | `pm-business` | `pm-business/strategy-memo/strategy-memo.md` |
 | Student Feedback | `pm-education` | `pm-education/student-feedback/student-feedback.md` |
 | Substack Notes Scraper | `pm-writers` | `pm-writers/substack-notes-scraper/substack-notes-scraper.md` |
 | Sycophancy Challenger | `pm-cross` | `pm-cross/sycophancy-challenger/sycophancy-challenger.md` |
@@ -225,6 +234,7 @@
 | User Story Writer | `pm-delivery` | `pm-delivery/user-story-writer/user-story-writer.md` |
 | UX Research Plan | `pm-design` | `pm-design/ux-research-plan/ux-research-plan.md` |
 | Vendor Evaluation | `pm-operations` | `pm-operations/vendor-evaluation/vendor-evaluation.md` |
+| Vendor Security Review | `pm-compliance` | `pm-compliance/vendor-security-review/vendor-security-review.md` |
 | Viral Content Framework | `pm-social` | `pm-social/viral-content-framework/viral-content-framework.md` |
 | Workshop Facilitation Guide | `pm-operations` | `pm-operations/workshop-facilitation-guide/workshop-facilitation-guide.md` |
 | Writing Great Skills | `pm-engineering` | `pm-engineering/writing-great-skills/writing-great-skills.md` |

package/exports/aider/pm-business/board-pre-read/board-pre-read.md

@@ -0,0 +1,57 @@
+# Board Pre-Read Skill
+
+The best board meetings spend zero time on status because the board already read it. A pre-read sent
+48+ hours ahead does that: it conveys the state of the business and, crucially, tells the board exactly
+what input and decisions are needed — so the meeting is discussion and decisions, not a slide-reading
+session. This skill structures that document.
+
+## Required Inputs
+
+Ask for these only if they aren't already provided:
+
+- **The headline** — the one thing the board should take away this period (good or bad).
+- **Metrics vs. plan** — the key numbers against the plan/forecast (revenue, growth, burn, runway, the north-star).
+- **What changed** — major wins, misses, and shifts since last meeting.
+- **Decisions/asks** — what you actually need from the board (approval, input, introductions).
+
+## Output Format
+
+### Board Pre-Read — [company], [month/quarter]
+**Sent:** [date, ≥48h before the meeting]
+
+**1. TL;DR** — 3–5 bullets: the state of the business, the headline, runway, and the decisions you're bringing. A busy board member should get the gist from this alone.
+
+**2. Metrics dashboard** — the core numbers vs. plan, with the trend and a one-line "so what" each. Show misses honestly — boards trust founders who surface bad news first.
+
+| Metric | This period | vs. plan | Trend | Note |
+|---|---|---|---|---|
+
+**3. What's working** — the 2–3 things going well and why (so they can be doubled down on).
+
+**4. What's not** — the 2–3 problems, what you're doing about them, and where you want the board's help. Candour here is the whole game.
+
+**5. Decisions & asks** — explicit: "We're asking the board to approve X" / "We'd value input on Y" / "We need intros to Z." Tie each to the agenda.
+
+**6. Risks & watch-items** — the top risks to the plan and runway, and the leading indicators you're watching.
+
+**Appendix** — detail, financials, and supporting data (linked, not inline).
+
+## Quality Checks
+
+- [ ] It's genuinely a pre-read — sent ahead, readable without a presenter
+- [ ] The TL;DR stands alone for a time-pressed director
+- [ ] Metrics are shown vs. plan, with misses surfaced honestly (not buried)
+- [ ] The decisions/asks for the board are explicit and tied to the agenda
+- [ ] Runway and the top risks are stated plainly
+
+## Anti-Patterns
+
+- [ ] Do not save bad news for the live meeting — boards punish surprises; lead with the hard numbers
+- [ ] Do not send a deck to be read aloud — a pre-read is prose/dashboards designed for solo reading
+- [ ] Do not omit the asks — if the board doesn't know what you need, the meeting defaults to status theatre
+- [ ] Do not vanity-metric the dashboard — show the numbers that govern the business, against plan
+- [ ] Do not inline 40 pages of appendix — link the detail; keep the core pre-read tight
+
+## Based On
+
+Board-management practice — pre-circulated reading, metrics-vs-plan transparency, and decision-focused agendas.

package/exports/aider/pm-business/capital-allocation/capital-allocation.md

@@ -0,0 +1,65 @@
+# Capital Allocation Skill
+
+Allocating capital is the core executive job: a fixed pot, more good ideas than money, and the need to
+say no on the record. This skill scores initiatives by expected return *and* strategic fit per unit of
+cost, allocates against the cap (honouring must-funds), and makes the **cut line** explicit — so funding
+is a defensible portfolio choice, not the loudest voice in the room.
+
+## Required Inputs
+
+Ask for these only if they aren't already provided:
+
+- **The cap** — the total budget or headcount to allocate, and the period.
+- **The initiatives** — each with its cost, expected return (revenue, savings, or a strategic value), and strategic fit.
+- **Constraints** — anything that *must* be funded (compliance, keep-the-lights-on) or can't be partially funded.
+- **The objective** — what you're optimising: near-term return, strategic positioning, or a balance.
+
+## Output Format
+
+### Capital Allocation: [pot], [period]
+
+**1. Objective & cap** — what you're optimising and the total available.
+
+**2. Scored initiatives** — a table; score = expected value × strategic fit, normalised per unit cost:
+
+| Initiative | Cost | Expected return | Strategic fit (1–5) | Score / $ | Must-fund? |
+|---|---|---|---|---|---|
+
+**3. The allocation** — funded vs. unfunded against the cap, with budget utilisation. Must-funds first, then highest score/$ until the cap binds.
+
+**4. The cut line** — the marginal initiative that *just* missed, and what it would take to fund it (the most useful number for the debate).
+
+**5. Rationale & trade-offs** — why the portfolio is balanced this way, what's deliberately not funded, and the reversibility of each bet.
+
+**6. Re-evaluation triggers** — what would change the allocation mid-period (a bet pays off early, a must-fund grows).
+
+## Programmatic Helper
+
+`scripts/capital_allocate.py` (stdlib only) does the allocation deterministically — must-funds first, then
+by score-per-cost until the cap binds — and reports the cut line:
+
+```bash
+# items.json: [{"name":"Mobile revamp","cost":300,"expected_return":900,"strategic_fit":5,"must_fund":false}, ...]
+python3 scripts/capital_allocate.py items.json --budget 1000
+python3 scripts/capital_allocate.py items.json --budget 1000 --json
+```
+
+## Quality Checks
+
+- [ ] Initiatives are scored on expected return AND strategic fit, not return alone
+- [ ] Score is expressed per unit of cost, so cheap-good beats expensive-good fairly
+- [ ] Must-funds are honoured before discretionary allocation
+- [ ] The cut line is explicit — the marginal initiative and what it'd take to fund it
+- [ ] What's deliberately not funded is stated, with the trade-off
+
+## Anti-Patterns
+
+- [ ] Do not allocate by last year's split or by who argues hardest — score the portfolio
+- [ ] Do not rank by absolute return — a $900 return on $300 beats $1000 on $900; use return per dollar
+- [ ] Do not ignore strategic fit — the highest-ROI initiative can still be off-strategy
+- [ ] Do not hide the cut line — the initiatives that just missed are the real decision, and the team deserves to see it
+- [ ] Do not treat estimates as facts — expected returns are usually [hunch]/[external]; flag the confidence
+
+## Based On
+
+Portfolio capital-allocation practice — expected-value × strategic-fit scoring per unit cost, against a hard constraint.

package/exports/aider/pm-business/decision-memo/decision-memo.md

@@ -0,0 +1,58 @@
+# Decision Memo Skill
+
+A decision memo exists to get a decision made — fast, on the record, by the right person. The failure
+mode is a memo that reads like a discussion: lots of context, no recommendation, no ask. This skill
+front-loads the recommendation and the decision being requested, then *supports* it — so the reader can
+say yes, no, or "here's my concern" in five minutes.
+
+## Required Inputs
+
+Ask for these only if they aren't already provided:
+
+- **The decision** — the specific choice to be made (phrase it as a question with a yes/no or A/B/C answer).
+- **The recommendation** — your actual recommendation (a memo without one is a status update).
+- **The options** considered and their trade-offs.
+- **The decider & deadline** — who owns this call and by when.
+
+## Output Format
+
+### Decision Memo: [the decision]
+**To:** [decider] · **From:** [you] · **Date:** [date] · **Decision needed by:** [date]
+
+**1. Recommendation (TL;DR)** — the recommendation in 2–3 sentences, *first*. What you want them to approve, and the one-line why.
+
+**2. The decision** — the question being decided, framed so the answer is a clear choice.
+
+**3. Context** — the minimum background needed to evaluate it (link the rest). Why this is on the table now.
+
+**4. Options & trade-offs** — a table; be fair to the options you're not recommending (a stacked deck reads as one):
+
+| Option | Pros | Cons | Cost / effort |
+|---|---|---|---|
+
+**5. Why this recommendation** — the reasoning, and **what you'd have to believe** for it to be wrong (the assumptions it rests on).
+
+**6. Risks & mitigations** — the real downsides and how you'd handle them. A reversible decision deserves less agonising than an irreversible one — say which it is.
+
+**7. The ask** — exactly what you need from the reader: approve / pick an option / give input — by the deadline.
+
+## Quality Checks
+
+- [ ] The recommendation is in the first paragraph, not the conclusion
+- [ ] The decision is framed as a clear question with a finite set of answers
+- [ ] Options not recommended are presented fairly, with real pros
+- [ ] The memo states what would have to be true for the recommendation to be wrong
+- [ ] It says whether the decision is reversible (one-way vs. two-way door)
+- [ ] There is an explicit ask and a decision deadline
+
+## Anti-Patterns
+
+- [ ] Do not bury the recommendation at the end — the reader should know what you want in the first 30 seconds
+- [ ] Do not write a status update disguised as a decision memo — if there's no decision and no ask, it's not this document
+- [ ] Do not stack the options — strawman alternatives destroy your credibility and the decision's quality
+- [ ] Do not over-agonise a reversible decision — match the rigor to the cost of being wrong
+- [ ] Do not hide the assumptions — surfacing "what we'd need to believe" is what lets a decider pressure-test it
+
+## Based On
+
+Narrative decision-memo practice (Amazon-style one/six-pagers; one-way vs. two-way door decisions).

package/exports/aider/pm-business/strategy-memo/strategy-memo.md

@@ -0,0 +1,56 @@
+# Strategy Memo Skill
+
+Strategy is choosing what *not* to do. A real strategy memo makes a bet and names the sacrifices; a fake
+one is a list of goals everyone already agreed with. This skill follows the diagnosis → guiding policy →
+coherent actions structure, forces explicit non-goals, and ties the bet to leading indicators — so the
+team is aligned on a direction sharp enough to be wrong.
+
+## Required Inputs
+
+Ask for these only if they aren't already provided:
+
+- **The strategic question** — the choice or challenge this memo resolves.
+- **The situation** — the honest diagnosis: the market, the competition, your real position and constraints.
+- **The bet** — the approach you're choosing and what it's betting on being true.
+- **The trade-offs** — what you'll deliberately not do or de-prioritise to make the bet.
+
+## Output Format
+
+### Strategy Memo: [the strategic question]
+
+**1. The question** — the strategic choice being made, in one sentence.
+
+**2. Diagnosis** — the honest read of the situation: what's really going on, the few factors that matter most, and your true position (not the aspirational one). A strategy built on a flattering diagnosis fails.
+
+**3. The bet (guiding policy)** — the chosen approach and, explicitly, **what it assumes is true**. This is the spine — everything else serves it.
+
+**4. Why now** — why this is the right bet at this moment (the window, the catalyst), not last year or next.
+
+**5. What we're NOT doing** — the explicit non-goals and de-prioritisations. If this list is empty, it isn't a strategy — it's a wish list.
+
+**6. Coherent actions** — the few moves that follow from the bet and reinforce each other (not a laundry list of everything).
+
+**7. How we'll know** — the leading indicators that tell you the bet is working (or not) early, and the conditions under which you'd reconsider.
+
+**8. Risks** — what could make the bet wrong, and which assumptions to validate first.
+
+## Quality Checks
+
+- [ ] The diagnosis is honest about the real position, not aspirational
+- [ ] The bet states what it assumes to be true — it's falsifiable
+- [ ] There's an explicit "what we're NOT doing" list with real sacrifices
+- [ ] The actions are few and coherent (mutually reinforcing), not an everything-list
+- [ ] Leading indicators are named so you learn early whether it's working
+- [ ] "Why now" is answered — the timing is justified
+
+## Anti-Patterns
+
+- [ ] Do not write goals and call it strategy — "grow revenue, delight customers" is a wish list, not a bet
+- [ ] Do not skip the non-goals — a strategy that sacrifices nothing commits to nothing
+- [ ] Do not build on a flattering diagnosis — naming the uncomfortable truth is the hardest and most important part
+- [ ] Do not list every initiative — coherent actions reinforce one bet; a long list dilutes it
+- [ ] Do not leave the bet unfalsifiable — if no evidence could prove it wrong, it can't be pressure-tested
+
+## Based On
+
+Good Strategy / Bad Strategy (Richard Rumelt) — diagnosis, guiding policy, coherent action; and the discipline of explicit non-goals.

package/exports/aider/pm-compliance/data-retention-policy/data-retention-policy.md

@@ -0,0 +1,63 @@
+# Data Retention Policy Skill
+
+"Keep everything forever" is a liability, not a strategy — it grows breach exposure, violates data-
+minimisation rules (GDPR, CCPA), and turns every data subject request into an archaeology project. This
+skill builds a retention schedule that ties each data category to *how long* you keep it and *why*
+(legal basis), with a concrete deletion trigger — so retention is a defensible policy, not an accident.
+
+## Required Inputs
+
+Ask for these only if they aren't already provided:
+
+- **Data categories** — the kinds of data you hold (customer records, logs, financial, HR, marketing, backups).
+- **Legal/regulatory drivers** — anything mandating minimum retention (tax/financial records, employment law) or maximum (GDPR minimisation, sector rules).
+- **Business need** — why each category is genuinely needed and for how long.
+- **Where it lives** — systems and backups (backups are the most-forgotten place data outlives its policy).
+
+## Output Format
+
+### Data Retention Schedule: [organisation]
+
+**1. Schedule** — the core table, one row per data category:
+
+| Data category | Retention period | Basis (legal/business) | Deletion trigger | Method | System(s) |
+|---|---|---|---|---|---|
+| Customer PII | 3y after account closure | Legitimate interest + GDPR minimisation | Account closed + 3y | Hard delete | App DB, backups |
+| Financial records | 7y | Tax law (statutory minimum) | End of fiscal year + 7y | Archive then delete | Finance system |
+
+**2. Principles** — the policy stance: minimise by default, the shortest period that satisfies the basis, and that retention applies to **backups and logs too**.
+
+**3. Deletion mechanics** — how deletion actually happens (automated job vs. manual), how it cascades to backups, and how it's evidenced.
+
+**4. Flags** — categories with **no defined period** or **no legal/business basis** (these are the risk — data you can't justify keeping).
+
+## Programmatic Helper
+
+`scripts/retention_schedule.py` (stdlib only) validates a schedule and flags categories missing a
+period or a basis, and (given a closure/event date) computes the earliest deletion date:
+
+```bash
+# data.json: [{"category":"Customer PII","retention_months":36,"basis":"GDPR minimisation","event_date":"2024-01-15"}, ...]
+python3 scripts/retention_schedule.py data.json
+python3 scripts/retention_schedule.py data.json --json
+```
+
+## Quality Checks
+
+- [ ] Every category has both a retention period and a documented basis
+- [ ] Periods default to the shortest that satisfies the legal/business need (minimisation), not "indefinite"
+- [ ] Backups and logs are covered, not just the primary store
+- [ ] Each category has a concrete deletion trigger and method, not just a duration
+- [ ] Statutory minimums (tax, employment) and maximums (minimisation) are both respected
+
+## Anti-Patterns
+
+- [ ] Do not set retention to "indefinite" or leave it blank — undefined retention is the highest-risk, least-defensible state
+- [ ] Do not forget backups — data deleted from production that lives on in backups is still data you hold
+- [ ] Do not keep data with no legal or business basis — if you can't justify it, deleting it lowers risk for free
+- [ ] Do not set a blanket period for all data — tax records and marketing emails have very different drivers
+- [ ] Do not present statutory periods as advice — flag where legal/compliance must confirm the minimums
+
+## Based On
+
+Data-minimisation practice — GDPR Art. 5(1)(e) storage limitation, sector retention statutes, and defensible-deletion principles.