managing-product — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited managing-product (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill guides the orchestrator through defining what to build before any architecture or code is written. It sits between upstream clarification (understanding-the-ask, solutioning) and downstream technical design (architecting-software) and encodes the product management discipline needed to translate an understood idea into a structured, prioritised PRD that agents can execute against without ambiguity.
Use this skill when the user wants to build software and the solution direction is chosen but the product definition is not yet clear.
This skill covers:
This skill does NOT cover:
Handoff position:
understanding-the-ask → solutioning → managing-product → architecting-software
(clarify problem) (choose direction) (define what to build) (design how to build it)Receive from upstream: a clearly defined problem and a chosen solution direction ("we will build software that does X").
Hand off downstream: a PRD with problem statement, target users, success criteria, scoped requirements, and explicit non-goals — ready for an architect to begin system design.
Before starting, confirm you have:
A PRD.md file (or equivalent) containing the five essential elements:
Format: structured Markdown designed to be placed in the project as PRD.md and referenced by Claude Code.
What you're doing: Confirming what you know from upstream and identifying gaps before questioning begins.
Check whether you already have:
If the user arrives directly with a clear problem and audience (e.g. "I want to build a habit tracking app for myself"), confirm your understanding inline and proceed — invoking upstream skills is not required when all checklist items are satisfied by the initial statement. If problem or audience remains vague after confirmation, return to understanding-the-ask before proceeding.
State what you understand so the user can correct it before you invest time in extraction:
"Before we define what to build, let me confirm: we're solving [problem] for [user type]. Does that match your intent?"
Output: Confirmed problem and audience, or identification that upstream work is needed.
What you're doing: Pulling out the five essential PRD elements from the user's knowledge through focused, sequential questions. Ask one question at a time. Do not present a form or list all questions at once.
Extraction sequence:
A. Target users (if not already clear):
B. Core problem and current alternative:
C. Success definition:
D. Feature exploration:
E. Boundaries:
Redirecting solution-focused input:
Users often describe implementation rather than requirements. When this happens, redirect to outcomes:
Managing the conversation:
Keep questioning focused. You are looking for the five essential elements, not an exhaustive feature list. For a simple project (personal tool, weekend build), a single short conversation of 5 to 10 minutes is typically sufficient. For a complex project (production system, multiple user types, external integrations), each sub-area may require follow-up and several exchanges. Stop when you have enough to draft a PRD — not when the user has exhausted every idea.
Output: Raw understanding of users, core problem, success criteria, key capabilities, and boundaries. Ready to draft.
What you're doing: Converting vague requirements into testable statements before writing the PRD.
Before drafting, challenge any criteria that cannot be tested objectively:
| Vague statement | Clarifying question |
|---|---|
| "It should be easy to use" | "How would you test that? What would a new user be able to do within their first session?" |
| "It needs to be fast" | "Fast compared to what? Is there a specific action that needs to respond within a certain time?" |
| "It should be secure" | "What specifically needs to be protected? User data, transactions, access control?" |
| "It needs to scale" | "How many users are you planning for? Is scalability a day-one requirement or a future concern?" |
| "It should handle edge cases" | "Which edge cases? Let's name the ones that matter." |
The test: each acceptance criterion should be answerable with pass or fail. If you cannot imagine a specific test for it, it needs refinement.
The outcome is not always a number. Testable criteria can be functional: "A user who has never seen the app can complete a purchase without asking for help" is testable without being quantitative.
Output: Sharpened acceptance criteria ready for the PRD.
What you're doing: Drawing a clear line between what is in this version and what is not.
Apply MoSCoW to the requirements surfaced in Step 2:
The Won't Have / Non-Goals distinction: "Won't Have" lists specific features considered and set aside during requirements extraction. "Non-Goals" states broader boundaries about what the product is not trying to be (e.g. "this is not a social platform"). Both sections are necessary and should not duplicate each other.
The one-page heuristic: If you cannot summarise the MVP requirements on a single page, either the scope is too large (split into phases) or the problem is not yet clear enough (return to Step 2). This is a diagnostic tool, not a rigid rule.
When to split into phases:
Split when:
Do not split just to keep the document short. Split only when there is real sequencing logic. When you split, produce a separate PRD for each phase.
Common mistakes to catch:
Explicit non-goals are as important as explicit goals. For AI-assisted development, anything not explicitly excluded is fair game for the implementing agent. Name what you are NOT building.
Output: A prioritised feature list with clear in/out-of-scope boundary.
What you're doing: Writing the structured Markdown PRD from the knowledge extracted in Steps 2 through 4, validating it, then confirming with the user.
Use the PRD template below. Fill all sections. Leave no section empty — if something is genuinely unknown, mark it as an open question rather than omitting it. For a simple project, skip the "Could Have" and "Should Have" sections only if they would be empty; do not force structure onto a one-feature MVP.
Before presenting the PRD to the user, run this validation checklist:
If any item fails, fix it before proceeding.
After drafting, read back the key decisions to the user for confirmation:
"Here's what I've captured: the MVP will do [X, Y, Z] for [user type], with success defined as [criteria]. It will not include [explicit non-goals]. Does this match your intent?"
Adjust based on feedback, then save the final version as PRD.md in the project directory.
Output: Confirmed PRD saved as PRD.md.
# [Product Name]
**Status:** Draft
**Date:** YYYY-MM-DD
**Version:** 1.0
---
## Problem
[2–4 sentences. What specific problem are we solving? Who has it? Why does it matter?
What do they do today instead, and why is that insufficient?]
## Target Users
[Who is this for? Describe the primary user in concrete terms: their situation,
goal, and what they currently do. One or two sentences per user type. Max two types for an MVP.]
## Success Criteria
How we will know this worked:
- [Specific, testable criterion — e.g. "A first-time user can complete [core action]
without asking for help"]
- [Measurable outcome — e.g. "Users report that [X problem] no longer requires
a workaround"]
- [At least one criterion per primary user type]
## Requirements
### Must Have (P0 — MVP)
- As a [user], I want to [capability] so that [outcome]
- Acceptance: [specific, testable condition]
[Repeat for each P0 requirement. 3–7 for a focused MVP.]
### Should Have (P1 — next iteration)
- [Requirement] — [one-line rationale for deferral]
### Could Have (P2 — future consideration)
- [Requirement] — [one-line rationale for deferral]
### Won't Have (this version)
- [Requirement] — [brief reason or "outside product scope"]
## Non-Goals
This version will NOT:
- [Explicit boundary 1 — broader product direction, not a specific feature]
- [Explicit boundary 2]
- [Add as many as needed. When in doubt, name it explicitly.]
## Constraints
- **Platform / environment:** [Web app, mobile, CLI, API — or "TBD for architect"]
- **Tech stack:** [If specified by user; otherwise "TBD for architect"]
- **Existing system:** [What already exists, if extending. "Greenfield" if new.]
- **Performance:** [Any specific requirements, or "none specified"]
- **Security / data:** [Any specific requirements, or "none specified"]
## Open Questions
- [Question] — Owner: [who] — needs answer before [phase]User conflates "what" with "how": The user keeps specifying technical implementation (database schema, framework choice). Redirect: "The technical decisions belong with the architect — what matters here is what the user needs to be able to do. Can you describe that in terms of actions and outcomes?" If the user has genuine technical constraints (must use existing infrastructure), record those in the Constraints section, not the Requirements section.
User cannot describe success criteria: Some users genuinely do not know what success looks like beyond "it works." In this case, offer prompts: "Imagine a user coming back after a week. What would they tell you about it?" or "What problem would they no longer have?" This often unlocks the answer. If still blocked, write a draft criterion and ask the user to confirm or correct it.
Scope inflation during conversation: Ideas keep expanding during conversation. Do not suppress ideas — log them as P2 or "Won't have" immediately and continue. Return to the P0 set after the conversation to confirm the boundary holds.
Overlap with understanding-the-ask: Both skills involve questioning the user. The difference: understanding-the-ask clarifies intent and context (what problem, why it matters, is this the right thing to do). Managing-product extracts product-specific detail (which features, which users, what constitutes success, what is explicitly excluded). If you find yourself still clarifying intent, step back to understanding-the-ask before proceeding.
Context: User says "I want to build a habit tracking app."
Expected outcome:
Context: User says "I want to build a tool to manage our small agency's client projects."
Expected outcome:
Context: User says "I want to build a REST API with PostgreSQL for my inventory system."
Expected outcome:
This skill succeeds when:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.