Findings & checks · 1 flagged
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · README.md
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Trace & refs
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="./assets/banner.png" alt="CompetLab AI Skills — Competitive Intelligence for AI Agents" width="100%" /> </p>
CompetLab AI Skills
Turn competitive monitoring data into executive-ready intelligence — automatically.
40% of B2B buyers ask AI before they Google. These skills give your AI agent a competitive intelligence analyst's toolkit: landscape analysis, competitor dossiers, AI visibility reports, weekly briefings, sales battlecards — plus 8 forward-indicator skills (status/funding/hiring/agent-readiness/product velocity/customer voice/ai-ecosystem) and an orchestrator that produces complete CMO-grade strategic briefings. All powered by real monitoring data from CompetLab's 5 dimensions.
v2.0 — Leading + Lagging Indicators. The original 5 skills covered lagging indicators (what's already visible in monitoring data). The 8 new skills add leading indicators (what your competitors are about to do — funding rounds before press cycles, hiring patterns before product launches, MCP server presence before category-wide agent adoption). The orchestrator combines all 13 into a single one-command CMO briefing.
Install
npx skills add competlab/competlab-ci-skills --allOr install individual skills:
npx skills add competlab/competlab-ci-skills --skill competlab-ai-visibilitySkills
Orchestrator (1)
| Skill | What It Does | Say This |
|---|---|---|
| [competlab-cmo-report](skills/competlab-cmo-report/) | Complete CMO-grade strategic briefing — sequences all sub-skills + dashboards into 1 main briefing + 12 dimension docs + 3-5 competitor deep-dives | _"CMO briefing for [project]"_ / _"Itrinity briefing"_ |
Lagging-indicator skills (5 — the original set, also runnable standalone)
| Skill | What It Does | Say This |
|---|---|---|
| [competlab-ai-visibility](skills/competlab-ai-visibility/) | How AI models mention and rank your brand vs competitors | _"AI visibility report"_ |
| [competlab-weekly-briefing](skills/competlab-weekly-briefing/) | Weekly CI briefing — what changed, what it means, what to do | _"Weekly competitive update"_ |
| [competlab-competitor-dive](skills/competlab-competitor-dive/) | Full competitor dossier with SWOT from 5 dimensions + web research | _"Deep dive on [competitor]"_ |
| [competlab-battlecard](skills/competlab-battlecard/) | Sales-ready battlecards with objection handling | _"Battlecard vs [competitor]"_ |
| [competlab-landscape](skills/competlab-landscape/) | Full landscape — market dynamics, matrices, strategic recommendations | _"Competitive landscape review"_ |
Leading-indicator skills (7 NEW — surfaces what competitors are about to do)
| Skill | What It Does | Say This |
|---|---|---|
| [competlab-status-watch](skills/competlab-status-watch/) | Probes competitor status pages — outages, incidents, reliability posture, transparency gaps (sales-ready evidence) | _"Competitor reliability"_ |
| [competlab-funding-watch](skills/competlab-funding-watch/) | Funding events, ownership changes, ARR estimates, M&A activity, exec transitions, category-adjacent capital pressure | _"Funding posture for [project]"_ |
| [competlab-ai-ecosystem](skills/competlab-ai-ecosystem/) | External developer-ecosystem signals — GitHub orgs, npm/PyPI volumes, community MCP servers, marketplace presence | _"Developer adoption"_ |
| [competlab-hiring-signals](skills/competlab-hiring-signals/) | Hiring + GTM-motion via ATS APIs (Ashby/Greenhouse/Lever/Workable) + LinkedIn + exec transitions | _"Competitor hiring"_ |
| [competlab-agent-adoption](skills/competlab-agent-adoption/) | First-party MCP server + llms.txt + Schema.org agent-readiness verification via JSON-RPC POST (no false positives) | _"Agent-adoption posture"_ |
| [competlab-product-watch](skills/competlab-product-watch/) | Snapshots competitor changelogs, GitHub Releases, named-asset directories, MCP marketplaces, API doc versions | _"What did competitors ship recently"_ |
| [competlab-customer-voice-snapshot](skills/competlab-customer-voice-snapshot/) | G2/Capterra/Trustpilot snapshots + Reddit/HN recovery for developer-tool categories | _"Customer voice for [competitor]"_ |
Companion docs (load-bearing for orchestrator + sub-skills)
The orchestrator reads 6 companion docs at start. Sub-skills consuming Perplexity output also reference URL Verification pattern.
- `PATTERN-url-verification.md` — URL Verification discipline + MCP JSON-RPC POST sub-pattern + categorical-zero discovery-vs-capability carve-out
- `KNOWLEDGE-platform-mechanics-and-failures.md` — how each CompetLab dimension works, failure modes, cross-dim cascade map, vendor-discontinuation detection pattern, scan-failure-as-customer-facing-signal framing
- `TEMPLATE-briefing.md` / `TEMPLATE-dim-doc.md` / `TEMPLATE-comp-doc.md` — L3 briefing + L2 dim doc + L2 competitor deep-dive structures (including lite-comp variant + cross-dim convergence-paragraph pattern)
- `SKILLS-INDEX.md` — full skill index + install paths + cross-skill improvements
All companion docs live in skills/ root alongside the 13 skill folders, so a single cp -r skills/. .claude/skills/ install grabs everything in one command.
How It Works
Each skill combines three intelligence layers:
- CompetLab data — structured monitoring across 5 dimensions (AI Visibility, Tech & Trust, Content, Positioning, Pricing)
- Live web research — recent news, reviews, funding, social sentiment, market trends
- CI expertise — SWOT analysis, competitive matrices, positioning maps, cross-dimensional pattern recognition
The skills are the analyst. CompetLab is their data infrastructure.
What is CompetLab?
Competitive intelligence for the AI era. One platform, 5 dimensions, monitored automatically:
| Dimension | What It Tracks |
|---|---|
| AI Visibility | How ChatGPT, Claude, and Gemini rank your brand vs competitors (AI Visibility Score 0-100) |
| Tech & Trust | Tech stacks, security headers (grade A-F), trust signals, robots.txt AI bot blocking |
| Content | Sitemap analysis, content categories, publishing cadence, content gaps |
| Positioning | Homepage messaging, value props, CTAs, target audience, differentiators |
| Pricing | Plans, billing models, free tiers, enterprise pricing, gap analysis |
AI Visibility is what makes CompetLab unique — no other CI platform tracks how LLMs recommend brands in real time.
Start free trial (14 days, no credit card) | Learn more
Installation Options
Via Skills CLI (recommended)
# All skills
npx skills add competlab/competlab-ci-skills --all
# Single skill
npx skills add competlab/competlab-ci-skills --skill competlab-weekly-briefing
# Global (available in all projects)
npx skills add competlab/competlab-ci-skills --all -gVia Claude Code Plugin Marketplace
If you use Claude Code (v1.0.33+), you can install via the native plugin system:
/plugin marketplace add competlab/competlab-ci-skills
/plugin install competlab-ci-skills@competlab-ci-skillsManual (simplest — all 13 skills + 6 companion docs in one command)
git clone https://github.com/competlab/competlab-ci-skills.git
mkdir -p .claude/skills
cp -r competlab-ci-skills/skills/. .claude/skills/The skills/. (trailing slash + dot) copies the contents of skills/ into .claude/skills/ — the 13 skill folders AND the 6 companion docs at root. The orchestrator's competlab-cmo-report skill needs the companion docs at .claude/skills/ root to find them via Phase 0 mandatory reading.
For single-skill install:
cp -r competlab-ci-skills/skills/competlab-ai-visibility .claude/skills/(Note: individual standalone skills like competlab-ai-visibility work without companion docs. Only the orchestrator competlab-cmo-report and sub-skills that consume Perplexity output need them.)
Requirements
- CompetLab account — Start free trial (14 days, no credit card)
- CompetLab MCP server — Setup guide
- At least one project with competitors configured
- Web access — for live market research (optional but recommended)
Cross-Agent Compatibility
These skills follow the Agent Skills open standard. They work with:
- Claude Code
- Cursor
- GitHub Copilot / Codex
- Gemini CLI
- Any Agent Skills-compatible tool
Full functionality requires the CompetLab MCP server configured in your agent. Without it, skills can still run using web research only, but output will be less precise without structured monitoring data.
Note: The allowed-tools field in each skill uses Claude Code's MCP tool naming convention (mcp__competlab__*). Other agents may name the same MCP tools differently. The skill instructions and workflows are agent-agnostic.
Also Available
CompetLab offers multiple ways to access competitive intelligence:
| Tool | Best For |
|---|---|
| [MCP Server](https://github.com/competlab/competlab-mcp-server) | Direct AI agent access to raw data (24 tools) |
| [TypeScript SDK](https://github.com/competlab/competlab-sdk) | Programmatic access in Node.js apps (25 methods) |
| [REST API](https://competlab.com/developers/api) | Any language, any platform |
| Agent Skills (this repo) | Pre-built CI workflows for AI coding agents |
Links
- MCP Server Documentation
- REST API Reference
- TypeScript SDK (
npm install @competlab/sdk) - Privacy Policy
- Start Free Trial
Support
- Bug reports: GitHub Issues
- Email: [email protected]
- Documentation: competlab.com/developers
License
MIT — see LICENSE
Built by the CompetLab team. Competitive intelligence for the AI era.
