# pm-demand

Use when: 已完成 /pm-brainstorm 后，需要系统化收集需求、验证产品想法真伪、分析用户痛点 用户明确要求"需求调研""需求验证""验证痛点""分析用户痛点" 用户明确选择跳过 brainstorm，直接进入需求调研 Do NOT auto-select when: 用户用自然语言说"我想做一个XX""帮我规划XX产品""帮我设计一下需求" → 这些必须先路由到 start-super-pm → pm-brainstorm Direct slash-command use is allowed: 用户显式输入 /pm-demand 时可直接进入，但必

- **Type:** Agent Skill
- **Trust:** 10/100 (F), scored on the remote rubric — Limited: the scan came back clean but coverage was partial, so the score sits below what full coverage would allow. Nothing was found.
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 0.0.0
- **Author:** konglong87
- **License:** MIT
- **Source:** https://github.com/konglong87/superPM/tree/main/skills/01-demand-insight/pm-demand

## Trust

10/100 (F), scored on the remote rubric — Limited: the scan came back clean but coverage was partial, so the score sits below what full coverage would allow. Nothing was found.
- Publisher verified: no
- Install scripts: not scanned
- Prompt-injection scan: not run
- Obfuscation scan: not run

## Security scan

Not scanned. This is a coverage gap, not a clean result — Forge asserts nothing about this entry's security posture.

## Install

This is an Agent Skill — a prompt, not an MCP server, so there is no client config to generate. Fetch it with forge_get_skill and install it with forge_add_skill.

## Blast radius

Contained blast radius — runs as a prompt.
- Floor 4, ceiling 4 (tier: contained)
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/pm-demand
- Install plan: https://forgeregistry.com/api/v1/packages/pm-demand/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/pm-demand
- HTML page: https://forgeregistry.com/registry/pm-demand
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.