pm-ai-shipping

v2.1.0

AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, audit it for intended-vs-implemented security gaps and performance issues, and produce a reviewer-ready shipping packet.

Claude Code2 skills

by Paweł HurynMIT25kupdated 1 month ago

Source

$ git clone https://github.com/phuryn/pm-skills

Clone the source, then follow the repository's marketplace instructions for your runtime. The plugin root is pm-ai-shipping/ inside the repository.

Layout

pm-ai-shipping/

├── .claude-plugin/plugin.json
├── skills/intended-vs-implemented/SKILL.md
└── skills/shipping-artifacts/SKILL.md

Skills2

intended-vs-implementedskills/intended-vs-implemented/SKILL.md

The method for finding the gap between what a system is supposed to do and what the code actually does — the class of bug generic scanners miss because they have no model of intent. Defines what counts as documented intent, what counts as implementation evidence, which mismatches matter, and how to avoid hand-wavy findings. Use when auditing AI-built code, reviewing access control against documented permissions, or checking whether a codebase matches its own documentation.

shipping-artifactsskills/shipping-artifacts/SKILL.md

The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping. A small core every app needs — architecture, user/permission flows, permissions, variables/secrets, and a test-coverage map — plus conditional docs added only when they apply: emails, scheduled work, SEO, and embedded agents/automation. Defines what each doc must capture and how a reviewer or auditor uses it. Use when documenting a codebase for handoff, mapping user journeys and trust-boundary crossings, planning test coverage, or preparing for a security or performance audit.

Manifests1

pm-ai-shipping/.claude-plugin/plugin.json

{
  "name": "pm-ai-shipping",
  "version": "2.1.0",
  "description": "AI Shipping Kit — for PMs and founders accountable for AI-built code. Document a vibe-coded app, audit it for intended-vs-implemented security gaps and performance issues, and produce a reviewer-ready shipping packet.",
  "author": {
    "name": "Paweł Huryn",
    "email": "pawel@productcompass.pm",
    "url": "https://www.productcompass.pm"
  },
  "keywords": [
    "product-management",
    "ai-shipping",
    "vibe-coding",
    "security-audit",
    "performance-audit",
    "code-review",
    "documentation",
    "owasp",
    "shipping"
  ],
  "homepage": "https://www.productcompass.pm",
  "license": "MIT"
}