Token导航 LogoToken导航

Agent Skill · 待分类

startup-distribution-audit(启动分发审核)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

startup-distribution-audit 是待分类类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为需要联网;许可证信息还不明确,第三方扫描已通过,按安装量在待分类类的 11,209 个 Skill 里排第 7,661。

总安装 349周安装 15GitHub Stars 59下载 122核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:startup-distribution-audit(启动分发审核)
来源仓库:https://github.com/vasilyu1983/ai-agents-public
仓库路径:skills/startup-distribution-audit
安装命令:
npx skills add https://github.com/vasilyu1983/ai-agents-public --skill startup-distribution-audit
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/vasilyu1983/ai-agents-public --skill startup-distribution-audit

这个 Skill 是做什么的

这个 Skill 的分类还没最终确定,用法以来源仓库的说明为准。

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。可结合来源仓库、安装命令和原始 README 继续核验具体用法。

适用于安全审计与合规检查场景。startup-distribution-audit 属于待分类类 Skill,可作为该场景下的辅助能力补充。

来源仓库内路径:skills/startup-distribution-audit

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/vasilyu1983/ai-agents-public --skill startup-d…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要需要联网,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

startup-distribution-audit 怎么安装?

在终端执行 npx skills add https://github.com/vasilyu1983/ai-agents-public --skill startup-distributio…。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

startup-distribution-audit 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

startup-distribution-audit 需要什么权限?

权限级别是需要联网。该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

startup-distribution-audit 是免费的吗?

公开资料没有标注明确许可证,收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

startup-distribution-audit 用的人多吗?

公开数据是累计安装 349 次,近一周安装 15 次,下载 122 次,GitHub 59 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

startup-distribution-audit 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。
  • 第三方扫描已通过,常见的高风险行为没有命中。

先想清楚的地方

  • 许可证没有明确标注,能不能商用、能不能再分发都不确定。
  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理待分类类任务、又不想每次都手写提示词的人。

不太适合

  • 需要明确授权才能用到公司项目里的场景。
  • 需要厂商级技术支持和 SLA 的生产系统。

待分类类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
infsh-cli

infsh CLI · Codex、Claude

4,374,576382权限未标注未明确未收录
ai-video-generation

AI 视频生成 · Codex、Claude

4,313,376382调用外部服务未明确有提醒
lark-openapi-explorer

云雀 OpenAPI 浏览器 · Codex、Claude

2,064,1209,011需要联网未明确有提醒
lark-workflow-standup-report

Lark 工作流程站立报告 · Codex、Claude

2,041,6328,978需要联网未明确通过
use-my-browser

使用我的浏览器 · Codex、Claude

1,848,49140操作浏览器未明确未通过
startup-distribution-audit

启动分发审核 · 本页

34959需要联网未明确通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

Startup Distribution Audit (Startup Distribution God)

Use this skill when the product exists and the bottleneck is distribution, not engineering.

2026 context: AI has collapsed the cost to build, so every market is more crowded. Distribution advantage — not product — is the primary moat. Owned audiences, founder-led content, and speed-to-escape-velocity matter more than ever because copycats appear in weeks, not months.

Core promise:

  • Audit current growth skills and traction
  • Diagnose the current growth stage (0–3)
  • Identify the biggest missing distribution capability
  • Select 2–3 proven historical playbooks (with real company precedents)
  • Produce concrete, executable actions (30-day plan), plus anti-patterns

When to Use

  • “We built it, but we can’t get traction”
  • “Audit our growth/distribution capabilities”
  • “Give us a 30-day growth plan (no paid ads)”
  • “We have some users but don’t know what to do next”

When NOT to Use

  • ICP + GTM motion selection (PLG vs sales-led) -> startup-go-to-market
  • Positioning/messaging deep dive artifacts -> marketing-content-strategy
  • Channel-specific execution details (SEO, social, email, CRO) -> use the relevant marketing skill
  • Sales pipeline + closing mechanics -> startup-sales-execution
  • Onboarding/retention systems -> startup-customer-success

Minimum Inputs (Ask These First)

  • Product: what it does, who it’s for, pricing/free tier
  • Current traction: traffic, signups, activated users, retained users, revenue (or best estimates)
  • ICP guess: who is the “obvious” best-fit user today (and who is not)
  • Current channels tried: what has been tried, what worked, what didn’t
  • Constraints: time/week, budget, channels to avoid (default: no paid ads), and implementation boundaries (for example: no implementation yet)
  • Existing stack and tool boundaries: current systems in use (analytics, CRM, scheduling, comms), plus explicit no-new-systems constraints

If numbers are missing, proceed with explicit assumptions and define what to measure in Week 1.

Mandatory Output Structure (Always Use This Order)

  1. Growth Stage Diagnosis
  2. Skill Audit (table or bullets)
  3. Key Gaps Blocking Growth
  4. Proven Startup Playbooks to Apply
  5. 30-Day Execution Plan
  6. Anti-Patterns to Avoid

Formatting requirements:

  • Bullets, checklists, short explanations
  • No fluff, no theory-only output
  • Every major recommendation cites at least one real company precedent (even if adapted)

Existing-Stack Constraint Rule (Required)

  • Treat the current stack as the default execution surface.
  • If the user says no new systems, do not introduce new vendors/platforms in the primary plan.
  • Describe tactics as patterns first (for example: invite-link loop), not vendor names.
  • If a new system could help materially, label it as optional and keep a stack-native primary path.

Growth Stage Diagnosis (Required)

Pick exactly one:

  • Stage 0 — Invisible: no consistent users, no reliable acquisition surface
  • Stage 1 — Used but Not Needed: some users try it, few return (activation/retention failure)
  • Stage 2 — Retained but Not Growing: users stay, but no acquisition engine
  • Stage 3 — Growing but Fragile: one channel works, not yet defensible/diversified

Use evidence, not vibes. Ask for (or infer) these:

  • Activation definition (what is "first value")
  • Retention proxy (D7/D30, WAU/MAU, or repeat usage)
  • Acquisition surface (repeatable source of new users: community, SEO pages, outbound, integrations)
  • ICP clarity (who converts and retains best)
  • Competitive window (how fast can a competitor replicate the product with AI tooling?)

Skill Audit Framework (Required)

Rate each domain as Strong / Weak / Missing and explain impact on traction.

  • ICP clarity & problem framing
  • Messaging & positioning
  • Activation & onboarding
  • Retention & habit formation
  • Content systems (SEO, social, narrative)
  • Product-led growth mechanics (include hybrid PLG + sales-assist if relevant)
  • Growth loops & referrals
  • Owned distribution (newsletter, community, founder audience, Discord — 2026: this is a structural moat, not optional)
  • Community or ecosystem leverage
  • Analytics & feedback loops (2026 PLG metrics: activation rate, time-to-value, expansion revenue from self-serve, support request volume as friction proxy)

Guidance:

  • If Stage 0: ICP/messaging + “first 100 users” motions matter most; fancy loops are premature.
  • If Stage 1: treat distribution as a rounding error; fix activation and retention first.
  • If Stage 2: focus on 1 repeatable acquisition surface; don’t expand channels until one works.
  • If Stage 3: scale the winner and build a second surface; add compounding loops.

Playbook Selection Library (Pick 2–3, Stage-Aware)

Select only playbooks that match the stage and constraints. For each: why it worked then, why it fits now, how to adapt for 2026 conditions.

  • Content-as-distribution: HubSpot (inbound), Ahrefs (product-led content), Zapier (SEO pages)
  • Founder-led distribution: Basecamp (writing + direct audience), ConvertKit (creator-first + founder-led). 2026: every startup needs a "founding content creator" — AI lowers build barriers, so trust/voice is the differentiator
  • PLG virality: Dropbox (referrals), invite/link viral loop pattern (Calendly is one example), Slack (team invites). 2026: hybrid PLG + sales-assist is now standard for high-value accounts
  • AI-native distribution: Character.AI (100M users via organic social + user-generated characters), Midjourney (Discord-native public generation as virality engine). 2026: platform-native virality where every user action is visible
  • Community-led growth: Notion (templates + community), Figma (community + sharing), Webflow (showcase ecosystem). 2026: power users drive 3-7x downstream acquisitions via workplace advocacy
  • Programmatic SEO: Zapier (integration pages), Wise (calculator/utility pages), Kinsta (comparison/utilities)
  • Integration/ecosystem-led: Shopify App Store, Slack apps, Salesforce AppExchange
  • Owned audience + negative CAC: Build newsletter/community/Discord before or alongside product; reduces CAC to near-zero and creates defensible distribution independent of paid channels

30-Day Execution Plan (Required Shape)

Produce weekly goals, daily/weekly actions, success signals, and what to stop doing.

2026 urgency: AI tooling compresses competitive windows. Assume a well-funded team can replicate core product functionality in weeks. The 30-day plan must prioritize distribution lock-in (owned audience, network effects, switching costs) alongside acquisition.

Default sequencing (change only if evidence demands it):

  • Week 1: Diagnose + instrument + clarify ICP + fix biggest activation leak
  • Week 2: Run “unscalable” distribution (founder-led outreach / communities) + tighten onboarding
  • Week 3: Commit to 1 acquisition surface (content, ecosystem, outbound, community) + ship one compounding hook
  • Week 4: Double down on what worked + cut what didn’t + add repeatable cadence

Use templates when the user wants copy-paste artifacts:

  • assets/distribution-intake.md
  • assets/skill-audit-scorecard.md
  • assets/30-day-execution-plan.md

Competitive Window Assessment (Use at Stage 2+)

When the user has traction, assess defensibility:

  • Time to replicate core product with AI tooling (days/weeks/months)
  • Owned audience size (newsletter, community, Discord members)
  • Network effects strength (none / weak / strong — does each user make it better for others?)
  • Switching costs for retained users (data lock-in, integrations, workflow habits)
  • Distribution assets competitors cannot copy (founder audience, ecosystem position, proprietary data)

If competitive window is short (<4 weeks to replicate), the 30-day plan must front-load distribution lock-in over feature work.

Exemplar (Stage 1 SaaS — Condensed)

Product: AI meeting summarizer, free tier + $12/mo pro. 800 signups, 90 activated (11%), 22 retained D30 (2.75%).

Growth Stage: Stage 1 — Used but Not Needed.

Skill Audit (top gaps):

  • Activation: Weak — 11% activation, no guided first-run; users import one meeting, see a generic summary, leave
  • Retention: Missing — no triggers to return (no email digest, no calendar integration, no team sharing)
  • ICP clarity: Weak — targeting "anyone with meetings" instead of a specific painful persona

Playbooks selected:

  1. Invite-link activation fix (reduce time-to-value to <60 seconds with one-click setup)
  2. Slack/Notion integration-led retention (summaries appear where users already work)

Week 1 focus: Instrument activation funnel, fix "first value" moment (auto-connect calendar, show first real summary in <60s), define retained = "3+ summaries in 14 days."

Anti-pattern flagged: Founder wanted to add AI action items feature. Blocked — retention problem, not feature problem.

Anti-Patterns (Mandatory Warnings)

Explicitly call out:

  • Scaling tactics before activation/retention (ads, automation, referral loops)
  • Multi-channel spray without a winner (no depth, no learning)
  • "Build more features" as a substitute for distribution
  • Copying big-company playbooks (brand + budget) at zero-traction stage
  • Vanity metrics obsession (followers/traffic) without activation/retention improvement
  • Platform dependency without owned fallback (2026: assume platform access gets harder, not easier — build owned distribution in parallel)
  • Treating AI tooling as a moat (if you can build it in a weekend, so can competitors — distribution is the moat)
  • Pure self-serve PLG for enterprise-value deals (2026: hybrid PLG + human touch is the standard, not an exception)
  • Recommending tool swaps despite explicit no-new-systems constraints from the user

Resources

ResourcePurpose
distribution-channel-scoring.mdChannel evaluation, scoring dimensions, and prioritization
stage-audit-patterns.mdStage-specific audit methodology and intervention playbooks
competitive-window-analysis.mdCompetitive window assessment and defensibility scoring
channel-audit-templates.mdPer-domain audit worksheets, scoring rubrics, and summary scorecard
distribution-moat-analysis.mdDistribution moat types, scoring framework, and competitive defensibility
platform-distribution-playbook.mdPlatform-based distribution: marketplaces, directories, and launch strategies

Related Skills

  • startup-growth-playbooks - Broader stage playbooks + case studies
  • startup-go-to-market - ICP + motion + channel sequencing
  • marketing-content-strategy - Positioning + messaging + content systems
  • marketing-seo-complete - Technical SEO + organic growth execution
  • marketing-social-media - Channel tactics and content formats
  • marketing-product-analytics - Event taxonomy + funnels + retention measurement
  • startup-sales-execution - Founder-led sales, pipeline, discovery, closing
  • startup-customer-success - Onboarding, retention, churn prevention

平台分布

Codex

35%
按下载量换算43

Claude

28.81%
按下载量换算35

Cursor

18.9%
按下载量换算23

Gemini CLI

8.18%
按下载量换算10

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

需要联网

该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills