ankitjha67/product-architect

All notable changes to Product Architect. Format follows [Keep a Changelog](https://keepachangelog.com/);

> **This is a [Claude Skill](https://docs.anthropic.com/en/docs/agents-and-tools/skills).** Claude reads `SKILL.md`. This README is for human visitors.

git clone https://github.com/ankitjha67/product-architect.git

*Built through iterative human-AI collaboration using Claude (Anthropic). Compliant with [Anthropic's official skill guide](https://docs.anthropic.com/en/docs/agents-and-tools/skills). 25/25 skill compliance checks passed.*

category: product-development   tags: [product-management, startup, prd, strategy, compliance, finance, operations, hiring, launch, saas, marketplace]   repository: https://github.com/ankitjha67/product-architect

tags: [product-management, startup, prd, strategy, compliance, finance, operations, hiring, launch, saas, marketplace]   repository: https://github.com/ankitjha67/product-architect ---

repository: https://github.com/ankitjha67/product-architect

You have access to a system of 80 specialized agents and 36 frameworks hosted at: https://github.com/ankitjha67/product-architect

https://github.com/ankitjha67/product-architect

> the specialized agent file. Could you go to: > > **https://github.com/ankitjha67/product-architect/blob/main/agents/[XX-name].md**

> > **https://github.com/ankitjha67/product-architect/blob/main/agents/[XX-name].md** >

> **https://github.com/ankitjha67/product-architect/blob/main/agents/[XX-name].md**

> "For the best results, I also need the [framework name] file: > **https://github.com/ankitjha67/product-architect/blob/main/frameworks/[name].md**

> **https://github.com/ankitjha67/product-architect/blob/main/frameworks/[name].md**

- Insecure output handling: model output flowing into SQL/shell/eval()/HTML must be

[Credential-related source omitted]

□ Validate & escape model output before it flows into eval(), SQL, shell, or HTML

[Credential-related source omitted]

[Credential-related source omitted]

|------------------|-------------------|-------------------------------|-----------| | Docs → signup <8% | Signup gated behind sales or a credit card; no free tier | Self-serve signup, GitHub OAuth, free tier with real limits, a "get your k

| Docs → signup <8% | Signup gated behind sales or a credit card; no free tier | Self-serve signup, GitHub OAuth, free tier with real limits, a "get your key" CTA above the fold on every docs page | 2-4 weeks | | Signup → first call <60%/24

| Signup → first call <60%/24h | No key at signup; quickstart starts with an SDK install | Auto-provision `sk_test_` visible in 10s + a prefilled curl the dev can paste; curl-first quickstart | 1-3 weeks |

- One canonical quickstart per language that hits TTFHW < 5 min. - Pre-filled test API key for logged-in readers (no "go generate a key" detour). - Curl-first, then the SDK - developers trust curl because it has no hidden magic.

- Curl-first, then the SDK - developers trust curl because it has no hidden magic.

"message": "Missing required param: 'amount'. Provide an integer in paise.",            "param": "amount",            "doc_url": "https://docs.acme.dev/errors/parameter_missing",

"param": "amount",            "doc_url": "https://docs.acme.dev/errors/parameter_missing",            "request_id": "req_1a2b3c"

"doc_url": "https://docs.acme.dev/errors/parameter_missing",

1. Sign up (email/GitHub OAuth - offer GitHub, devs hate forms) 2. Land on dashboard with TEST key already visible + curl snippet pre-filled with it

2. Land on dashboard with TEST key already visible + curl snippet pre-filled with it

fixing the REFERENCE (add `amount` description, units = paise, runnable example). 3. Generate reference from the OpenAPI spec (with Agent 34); hand-write the how-to with    real cURL + Node + Python samples that run in CI so they can't go s

3. Generate reference from the OpenAPI spec (with Agent 34); hand-write the how-to with    real cURL + Node + Python samples that run in CI so they can't go stale. 4. Add an error-message contract for the common failure (refund > captured a

real cURL + Node + Python samples that run in CI so they can't go stale.

[Credential-related source omitted]

□ Frequency caps per user per week, quiet hours in the user's local timezone (Agent 43), an in-app preference centre. Uninstall punishes spam. DEEP LINKS - get this wrong and every campaign leaks users to the store: □ iOS Universal Links: a

DEEP LINKS - get this wrong and every campaign leaks users to the store: □ iOS Universal Links: apple-app-site-association at https://domain/.well-known/, served as application/json, no redirects, no auth. Android   App Links: assetlinks.js

□ iOS Universal Links: apple-app-site-association at https://domain/.well-known/, served as application/json, no redirects, no auth. Android

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

| Style | Best fit | Real strengths | Real costs | |---|---|---|---| | **REST / JSON over HTTP** | Public APIs, partner integrations, anything a stranger must call from curl | Ubiquitous tooling, cacheable via HTTP semantics, debuggable by 

|---|---|---|---| | **REST / JSON over HTTP** | Public APIs, partner integrations, anything a stranger must call from curl | Ubiquitous tooling, cacheable via HTTP semantics, debuggable by anyone, no client library needed | Verbose, weakly 

| **REST / JSON over HTTP** | Public APIs, partner integrations, anything a stranger must call from curl | Ubiquitous tooling, cacheable via HTTP semantics, debuggable by anyone, no client library needed | Verbose, weakly typed without a sc

LLM02 Insecure output       - model output flows into eval()/SQL/shell/HTML. Validate &

| ML or LLM in the user path              | AI eval (63), Privacy (39)   | AI eval (63)   |

DAY 3 - FIX THE TOP 3 (ranked by seconds lost): □ Test key: auto-provision an `sk_test_` key on signup, visible in 10s, pre-filled   into a runnable curl snippet on the dashboard ("Run this →" button).

□ Test key: auto-provision an `sk_test_` key on signup, visible in 10s, pre-filled   into a runnable curl snippet on the dashboard ("Run this →" button). □ Quickstart: rewrite curl-first, then the SDK. One canonical quickstart per language.

into a runnable curl snippet on the dashboard ("Run this →" button).

DAY 3 - WRITE THE 5-MINUTE QUICKSTART: □ Curl-first, then the SDK (devs trust curl - no hidden magic). Copy-paste must run

□ Curl-first, then the SDK (devs trust curl - no hidden magic). Copy-paste must run

⛔ Rewriting only the happy path - empty/error/loading states are where users actually rage-quit ⛔ Clever copy that adds a beat of "wait, what?" - onboarding is not the place for jokes ⛔ Generic errors ("something went wrong") that don't tel

⛔ Clever copy that adds a beat of "wait, what?" - onboarding is not the place for jokes ⛔ Generic errors ("something went wrong") that don't tell the user what to fix ⛔ Changing copy AND layout together (you'll never know which moved the me

⛔ Generic errors ("something went wrong") that don't tell the user what to fix

[Credential-related source omitted]

Product Architect is a multi-agent skill system for [Claude](https://claude.ai) that transforms any product idea into a complete, executable blueprint. It covers **every department, function, process, and policy** that exists in a world-cla

Executable file

<div style={{ minHeight: "100vh", background: C.bg, color: C.text, fontFamily: "'Inter', system-ui, -apple-system, sans-serif" }}>       <style>{`         @import url('https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&

<style>{         @import url('https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap');

@import url('https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap');

#!/usr/bin/env python3

first = content.splitlines()[0].lstrip("<U+FEFF>").strip()