four-core-documents — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited four-core-documents (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill produces Part 3 of the engagement methodology: the four documents that together define the brand at strategic depth. Every channel strategy, every creative brief, every piece of copy reads back to these.
Heavy skill. Grep before Read any referenced file, then Read only matched ranges with offset + limit. List ${CLAUDE_PLUGIN_DATA}/<brand>/ before opening files. On re-invocation mid-session, skip files already in context.
Specification: four-core-documents-spec.md — the exact 61 steps across the four documents.
Engagement context: engagement-flow-methodology.md — where Part 3 fits in the 12-Part flow.
Before running this skill, verify:
~/.claude-marketing/brands/{brand-slug}/profile.json. If not, run /digital-marketing-pro:brand-setup first._engagement.json present. If not, run /digital-marketing-pro:engagement start first.If any pre-condition fails, do NOT produce output. Instead, instruct the user on what to run first.
/digital-marketing-pro:four-core-documents <brand-slug> <engagement-id>Produces 3.1, 3.2, 3.3, 3.4 in sequence. Total time: 30–90 minutes depending on engagement complexity.
/digital-marketing-pro:four-core-documents <brand-slug> <engagement-id> --doc 3.1Produces just the specified document. Useful for re-runs (Part 6) or when one doc needs to be redone independently.
/digital-marketing-pro:four-core-documents <brand-slug> <engagement-id> --view v2 --docs "3.1,3.3"Produces v2 versions of the specified documents. Used during Part 6 after the Decision Matrix has triggered re-runs.
/digital-marketing-pro:four-core-documents <brand-slug> <engagement-id> --combinedStitches all four canonical core documents (latest version of each) into a single executive-reference file with master TOC, master assumptions table, and master source index. Produced only when an executive audience needs a single-file read.
The four documents are produced in sequence because each builds on the prior:
When running re-runs, only the affected documents are regenerated. Other documents remain at their current version.
Read the spec section for 3.1 in four-core-documents-spec.md. The 18 steps are:
Inputs:
part-01-client-inputs/stone-facts.json — ground-truth factspart-02-external-research/ — unbiased external research (industry data, market context)~/.claude-marketing/brands/{slug}/profile.jsonOutput:
engagements/{id}/part-03-four-core-documents/v1/3.1-business-and-sbu-analysis.md
(For v2 re-runs: same path but in v2/ instead of v1/)
Output structure:
---
document: 3.1-business-and-sbu-analysis
version: v1.0
engagement: {engagement-id}
brand: {brand-slug}
produced: {iso-timestamp}
view: v1 # or v2 for re-runs
---
# 3.1 Business & SBU Analysis
## Step 1: SBU Identification
[Content for step 1]
## Step 2: SBU Separation Rationale
[Content for step 2]
... (all 18 steps, in order)
## Sources
[Numbered list of every cited source: client docs, public sources, industry reports, Stone facts referenced]
## Open Questions
[Anything that could not be answered with available info]
## Change Log
### v1.0 — {date}
- Initial unbiased research version produced from Part 2 + Stone facts.The 15 steps:
Steps 10–13 are skipped for B2C engagements. The skill detects B2B vs B2C from the brand profile's business_model.type field.
Inputs:
part-04-competitive-customer-market/v1/4.3-customer-analysis.md if available (for unbiased customer research)Output:
engagements/{id}/part-03-four-core-documents/v1/3.2-segmentation-framework.md
The 19 steps:
Inputs:
part-04-competitive-customer-market/v1/4.2-competitor-positioning.md if availableOutput:
engagements/{id}/part-03-four-core-documents/v1/3.3-brand-positioning-and-communications.md
The 9 steps:
Inputs:
Output:
engagements/{id}/part-03-four-core-documents/v1/3.4-dmflow.md
Each document is produced as a single file containing all its steps. If a document cannot be completed in one turn due to output limits:
The skill uses an internal continuation mechanism — if it hits a limit, it logs the cut-off step and resumes from there.
Once all four documents are produced (or after each individually):
_engagement.jsonWhen invoked with --view v2, the skill:
## v1 → v2 Changes
- Section X (Step N): {what changed} — driven by {client validation finding ID}
- Section Y: ...v2/{doc-name}.md (the v1 file remains untouched)_engagement.json via engagement-state.py bump-versionUser: Produce the four core documents for the Acme engagement.
Skill response:
1. Verify pre-conditions: brand profile ✓, engagement initialised ✓, Part 1 complete ✓, Part 2 in progress ✓
2. Begin 3.1 Business & SBU Analysis. Read Stone facts, Part 2 research, brand profile. Walk all 18 steps. Cite sources throughout. Save to v1/3.1-business-and-sbu-analysis.md.
3. Begin 3.2 Segmentation Framework. Read 3.1, Part 4.3 if available. Detect business model = B2B from profile, so include steps 10-13. Walk 15 steps. Save to v1/3.2-segmentation-framework.md.
4. Begin 3.3 Brand Positioning. Read 3.1, 3.2, Part 4.2 if available. Walk 19 steps. Save to v1/3.3-brand-positioning-and-communications.md.
5. Begin 3.4 DMFlow. Read 3.1, 3.2, 3.3. Apply 5 Digital Markets taxonomy. Walk 9 steps. Save to v1/3.4-dmflow.md.
6. Update LIF: positioning statement, primary persona, channel selections, blended CAC estimate.
7. Mark Part 3 completed.
8. Brief: "Part 3 complete. 4 documents, 61 steps. Total ~12,000 words across all four. Recommend reviewing 3.3 (positioning) carefully — the chosen positioning has notable trade-offs documented in step 6."User: Re-run 3.3 and 3.4 as v2 — client rejected the positioning and we need to redo the channel mix as a result.
Skill response:
1. Verify Part 5 Client Validation Document exists with positioning rejection captured ✓
2. Begin 3.3 v2. Read 3.3 v1 + Client Validation Document. Re-do positioning per client direction. Add v1→v2 changes header. Save to v2/3.3-brand-positioning-and-communications.md.
3. Begin 3.4 v2. Read 3.4 v1 + (now updated) 3.3 v2. Re-do channel mix to align with new positioning. Add v1→v2 changes header. Save to v2/3.4-dmflow.md.
4. Bump versions: engagement-state.py bump-version --doc 3.3 + --doc 3.4
5. Update LIF: new positioning statement, new channel selections, version history.
6. Brief: "v2 re-runs complete. 3.1 and 3.2 unchanged (still v1.0). 3.3 and 3.4 now at v2.0. Both views remain available. Operating decisions should reference v2 docs."User: Produce the Combined Core Document for the executive presentation next week.
Skill response:
1. Verify all four core documents exist (latest version of each) ✓
2. Read 3.1 v1.0, 3.2 v1.0, 3.3 v2.0, 3.4 v2.0
3. Synthesise into single document with:
- Master TOC at top
- Each document as a major section
- Master Assumptions Table (extract every "Assumption" call-out from all four docs)
- Master Source Index (de-duplicated list of every source cited)
4. Save to part-03-four-core-documents/3.C-combined-core-document.md
5. Brief: "3.C produced. 60+ pages. Includes master TOC + assumptions table + source index. Recommended exports: PDF for the executive deck, DOCX if they want to annotate."engagement-workflow — orchestrates the 12-Part flow that contains Part 3client-validation-document — Part 5 deliverable that triggers v2 re-runsaudience-intelligence, competitive-intel, market-intelligence, brand-guardian~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.