Skip to content
skillsafebeta
← Report library
Purpose / Data analysis

Customer Research Skill Security Audit

What the author says it does (original text)

When the user wants to conduct, analyze, or synthesize customer research. Use when the user mentions "customer research," "ICP research," "talk to customers," "analyze transcripts," "customer interviews," "survey analysis," "support ticket analysis," "voice of customer," "VOC," "build personas," "customer personas," "jobs to be done," "JTBD," "what do customers say," "what are customers struggling

Independent security check

Security risks found

Files checked
4
Risks found
3
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Customer quotations and identity clues may be placed in shareable research documents

Source references: 7
What we found

The Skill captures exact quotations, URLs, dates, roles, company size, and industry clues and offers a VOC quote bank, but it does not require removal of names, handles, contact details, or sensitive business content. Combining these fields can identify the speaker.

Why this matters

Customer identities, complaints, and internal details from interviews, tickets, surveys, or semi-public communities could be copied into shared reports, marketing material, or broadly accessible team documents.

The Skill calls for verbatim quotes alongside source URLs, dates, roles, company size, and industry clues, and offers a VOC quote bank as a deliverable. Combined fields may identify a customer, employee, or community account even when each field seems harmless. The supplied text has no de-identification, sensitive-content filtering, access-control, or republication rule. Impact depends on the source material and recipients; users can restrict identity fields and require redacted, controlled sharing.

SKILL.md:76In the instructionsOpen original file
4. **Desired Outcomes** — what does success look like in their words?   - Capture exact quotes, not paraphrases5. **Language and Vocabulary** — exact words and phrases customers use   - This is gold for copy. "We were drowning in spreadsheets" > "manual process inefficiency"
Show 6 other places
SKILL.md:144In the instructionsOpen original file
| Field | What to Capture ||-------|----------------|| Source | Platform, thread URL, date || Verbatim quote | Exact words — don't paraphrase || Context | What prompted the comment? || Sentiment | Positive / negative / neutral / frustrated || Theme tag | Pain / trigger / outcome / alternative / language || Customer profile signals | Role, company size, industry hints from the post |
SKILL.md:268In the instructionsOpen original file
1. **Research synthesis report** — themes, quotes, patterns, and implications2. **VOC quote bank** — organized verbatim quotes by theme, for use in copy3. **Persona document** — 1-3 personas built from the research4. **Jobs-to-be-done map** — functional, emotional, and social jobs by segment
references/interviews-and-surveys.md:50In the instructionsOpen original file
Recruitment methods, in order of leverage:1. **Segment the CRM** by the three signals above and pull a shortlist2. **Ask sales and CS for referrals** — they know who loves the product and who articulates why3. **Always close every call with**: *"Who else should we talk to?"* — the single most reliable way to compound your interview pipeline
SKILL.md:142In the instructionsOpen original file
For every piece of content you find:| Field | What to Capture ||-------|----------------|| Source | Platform, thread URL, date || Verbatim quote | Exact words — don't paraphrase || Context | What prompted the comment? || Sentiment | Positive / negative / neutral / frustrated || Theme tag | Pain / trigger / outcome / alternative / language || Customer profile signals | Role, company size, industry hints from the post |
SKILL.md:264In the instructionsOpen original file
## Deliverable FormatsDepending on what the user needs, offer:1. **Research synthesis report** — themes, quotes, patterns, and implications2. **VOC quote bank** — organized verbatim quotes by theme, for use in copy3. **Persona document** — 1-3 personas built from the research4. **Jobs-to-be-done map** — functional, emotional, and social jobs by segment
references/source-guides.md:340In the instructionsOpen original file
## Organizing Your ResearchUse a simple tagging system across all sources:| Tag | Meaning ||-----|---------|| `#pain` | A problem or frustration || `#trigger` | An event that prompted the search || `#outcome` | What success looks like || `#language` | Exact phrases worth using in copy || `#alternative` | Another solution they considered or use || `#objection` | Reason to hesitate or not buy || `#competitor` | Anything about a competing product |Keep a running doc with columns: Source | Date | Quote | Tags | Notes
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Participants are told not to be informed that the activity is research

Source references: 4
What we found

The guide explicitly says not to describe the activity as research or an interview, while its outreach template claims there is “no agenda.” Participants may therefore not understand that their responses will be systematically recorded, analyzed, and used for marketing, product, or positioning decisions.

Why this matters

People who would decline because of recording, quotation, commercial use, or privacy concerns may disclose information without informed consent, creating trust, compliance, and reputational risk.

The guide actively says to present research calls as casual chats, never call them “customer research,” and tell invitees there is “no agenda.” If responses are recorded or used for marketing or product decisions, this framing could prevent participants from understanding the use of their information. The text does not explicitly order secret recording, but it also provides no consent, recording notice, use disclosure, or opt-out step. A user can require those safeguards.

references/interviews-and-surveys.md:14In the instructionsOpen original file
> The first rule of customer research: you do not talk about customer research.Keep it casual. The moment a customer thinks they're in "a research study" they perform — they give you the polished, socially-acceptable answer instead of the real one. Frame calls as a chat, not an interview. Don't lead. Don't pitch. Don't defend the product. You're there to listen and learn how they actually think, talk, and decide.
Show 3 other places
references/interviews-and-surveys.md:63In the instructionsOpen original file
Keep it short, casual, specific, and low-commitment. Not a "research study."
references/interviews-and-surveys.md:70In the instructionsOpen original file
I'm [name] from [company]. I'm trying to get better at helping customerslike you, and I'd love to steal 30 minutes to hear how [product area] isactually working for you — what's good, what's annoying, what you wishwere different. No pitch, no agenda.As a thank you I'll send you a $50 [Amazon/Visa] gift card.
references/interviews-and-surveys.md:83In the instructionsOpen original file
Notes:- "No pitch, no agenda" and "what's annoying" signal you actually want the truth.- One clear ask, two concrete time options, a booking link. Remove friction.- Never say "customer research study."
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

Measuring PMF with a “best customers” sample can systematically overstate market fit

Source references: 4
What we found

The interview guide prioritizes high-value, fast-closing, low-churn customers, then treats 40% “very disappointed” in one survey as likely PMF and labels that cohort the “true market.” Using the same favorable sample for PMF measurement would bias the result upward.

Why this matters

The user could expand spending, reshape the roadmap, or disregard churned and ordinary users based on a distorted PMF signal, leading to costly product and budget decisions.

What this evidence establishes

The guide prioritizes high-value, fast-closing, low-churn customers for interviews, while separately presenting a 40% PMF threshold and calling the “very disappointed” cohort the true market. Reusing that favored sample for the PMF survey could inflate results and distort roadmap decisions. However, the text never explicitly says to survey only those recruited customers, and its reliability table acknowledges interview selection bias. The claimed sampling error is therefore possible, not clearly mandated; users can require a defined survey population and segmented reporting.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
references/interviews-and-surveys.md:42In the instructionsOpen original file
### Recruit your best customersDon't interview whoever answers first. Interview the customers you want *more of*. Segment your CRM and prioritize by:- **High deal size** — the accounts worth the most- **Short sales cycle** — they "got it" fast; their language converts fast- **Low churn / high retention** — they got real, lasting valueRecruitment methods, in order of leverage:1. **Segment the CRM** by the three signals above and pull a shortlist2. **Ask sales and CS for referrals** — they know who loves the product and who articulates why3. **Always close every call with**: *"Who else should we talk to?"* — the single most reliable way to compound your interview pipeline
Show 3 other places
references/interviews-and-surveys.md:125In the instructionsOpen original file
**The 40% benchmark**: if **40% or more** of users answer **"very disappointed,"** you likely have product/market fit. Below 40%, keep iterating. **Superhuman reached 58%** by engineering their roadmap around this metric — segmenting on the "very disappointed" cohort, doubling down on what that cohort loved, and converting the "somewhat disappointed" fence-sitters.Run it as a recurring pulse, not once. Follow the core question with:- *"What type of person do you think would most benefit from [product]?"* (sharpens ICP)- *"What is the main benefit you receive from [product]?"* (your positioning, in their words)- *"How can we improve [product] for you?"* (roadmap fuel from fence-sitters)Segment every answer by the "very disappointed" cohort vs. the rest — that cohort is your true market.
references/interviews-and-surveys.md:127In the instructionsOpen original file
Run it as a recurring pulse, not once. Follow the core question with:- *"What type of person do you think would most benefit from [product]?"* (sharpens ICP)- *"What is the main benefit you receive from [product]?"* (your positioning, in their words)- *"How can we improve [product] for you?"* (roadmap fuel from fence-sitters)Segment every answer by the "very disappointed" cohort vs. the rest — that cohort is your true market.
references/source-guides.md:366In the instructionsOpen original file
| Source | Signal Strength | Bias to Note ||--------|----------------|--------------|| Customer interviews (unprompted) | Very high | Small sample; selection bias toward engaged customers || Win/loss interviews | High | Recent memory only; rationalization common || App store / G2 reviews | High | Skews toward strong opinions (love or hate) |

Inside this skill

8 instruction sections

The Skill first reads a product-marketing context file from the project and uses it to avoid repeated questions. Such files may contain internal positioning, customer, or business information, although the provided text does not instruct external transmission.

View source
SKILL.md:14In the instructionsOpen original file
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md` filename, in older setups), read it before asking questions. Use that context to skip questions already answered.

It analyzes user-provided interviews, surveys, reviews, and tickets, and can also gather signals from Reddit, G2, forums, and communities while recording verbatim statements, source details, dates, sentiment, and profile signals.

View source
SKILL.md:21In the instructionsOpen original file
### Mode 1: Analyze Existing AssetsYou have raw research material (transcripts, surveys, reviews, tickets). Your job is to extract signal.### Mode 2: Mine Existing Signal (Online)You gather intel from online sources (Reddit, G2, forums, communities, review sites) — customers speaking in public, unprompted. Your job is to know where to look and what to extract.
SKILL.md:144In the instructionsOpen original file
| Field | What to Capture ||-------|----------------|| Source | Platform, thread URL, date || Verbatim quote | Exact words — don't paraphrase || Context | What prompted the comment? || Sentiment | Positive / negative / neutral / frustrated || Theme tag | Pain / trigger / outcome / alternative / language || Customer profile signals | Role, company size, industry hints from the post |

No install commands or executable scripts are provided. Its stated outputs are documents such as research themes, quote banks, personas, jobs-to-be-done maps, and competitive intelligence, and it directs the agent to ask which deliverable the user wants.

View source
SKILL.md:264In the instructionsOpen original file
## Deliverable FormatsDepending on what the user needs, offer:1. **Research synthesis report** — themes, quotes, patterns, and implications2. **VOC quote bank** — organized verbatim quotes by theme, for use in copy3. **Persona document** — 1-3 personas built from the research4. **Jobs-to-be-done map** — functional, emotional, and social jobs by segment5. **Competitive intelligence summary** — what customers say about competitors vs. you6. **Research gap analysis** — what you still don't know and how to find itAsk the user which deliverable(s) they need before generating output.
Start here · InstructionsSKILL.md
customer-research
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source. 1 more sections are available in the original file.

File reference map

References: 4
Files making referencesReferenced content
Lines show actual file references, not execution order. Select a node to highlight its connections and inspect the files and source locations. Dashed lines include files that still need locating.
Files and check records4 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included
  • references/interviews-and-surveys.mdFull text included
  • references/source-guides.mdFull text included
  • evals/evals.jsonFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
  • evals/evals.jsonSupporting file
  • references/interviews-and-surveys.mdSupporting file
  • references/source-guides.mdSupporting file

Operations mentioned in code and instructions

Read files
references/interviews-and-surveys.md:6In the instructionsOpen original file
Three primary-research pillars, best used together:1. **Video calls** — deep, unstructured, follow-the-thread (this file)2. **Surveys** — broad, quantified, benchmarkable (this file)
Connect to websites
references/source-guides.md:15In the instructionsOpen original file
- Search `site:reddit.com "[job title] tools"` or `site:reddit.com "[problem category] software"`- Use [subreddit search tools](https://www.reddit.com/subreddits/search) with problem-space keywords- Look at what subreddits show up in Google results when you search ICP problems
Lines read
1,041
File checksum (to compare versions)
94d6f699c6ea247a0b9602b099b64ba4567ba48dd15654cf19bdc81d780d1bd8