跳转到正文
报告库
用途分类 / 其他用途

Pricing Skill 安全审计

作者说它能做什么(原文)

When the user wants help with pricing decisions, packaging, or monetization strategy. Also use when the user mentions 'pricing,' 'pricing tiers,' 'freemium,' 'free trial,' 'packaging,' 'price increase,' 'value metric,' 'Van Westendorp,' 'willingness to pay,' 'monetization,' 'how much should I charge,' 'my pricing is wrong,' 'pricing page,' 'annual vs monthly,' 'per seat pricing,' 'should I offer a

第三方安全检查结论

发现安全风险

已检查文件
6
发现的风险
3
会不会运行危险命令?检查是否下载程序后直接运行、让他人远程控制电脑,或藏起要运行的命令。未发现风险
会不会泄露文件和密钥?检查是否发送含密码或密钥的文件,以及代码里是否直接写了密钥。发现 1 项风险
中风险

“粘贴测试”和开放爬虫可能把非公开定价内容交给第三方

原文依据:4 处
发现了什么

指南让代理把定价 URL 或渲染后的页面文本交给具备联网能力的 AI,并建议允许 AI 搜索机器人抓取以及公开机器可读的价格。它没有先要求确认页面和文本是否可公开。

为什么需要注意

若审计对象是预发布、登录后、客户专属或包含未公开折扣的页面,URL、套餐、价格及相关页面文本可能被外部 AI 服务接收、记录或索引。

指南确实要求把 URL 或渲染后的页面文本交给外部联网 AI,并把允许 AI 搜索机器人抓取列为通过条件。对公开定价页通常合理,但若页面需登录、包含谈判价、客户专属条款或尚未发布的文本,粘贴内容或开放抓取会把信息交给第三方。来源没有先要求确认公开性或获得授权。用户可限制测试为已公开 URL,并禁止提交受限页面文本或修改爬虫策略。

SKILL.md:248来自说明文档打开原文件
**Fast check — the "paste test":** give the pricing URL to a browsing-capable AI (Perplexity, ChatGPT with search, Claude with web) — or paste the rendered page text — and ask "what are the plans and prices?" A clean miss means agents fetching your page will struggle too (a heuristic, not proof every agent fails).The AI-readiness fixes are usually high-impact, low-effort (put prices in text, add `Offer` schema). Hand implementation to **schema** (Product/Offer JSON-LD) and **ai-seo** (extractability, AI-bot access, `llms.txt`).
查看另外 3 个位置
references/pricing-page-teardown.md:35来自说明文档打开原文件
| 9 | **Per-tier depth in text** | Each plan's inclusions, limits, and quotas stated in words | Differences shown only as checkmark columns in an image; limits unnamed || 10 | **Structured data & extractability** | `Product`/`Offer` schema markup, clean semantic HTML, AI search/agent bots allowed to crawl (`llms.txt` is a nice-to-have, not yet a standard) | No schema; pricing behind auth/interaction; AI *search* bots blocked in robots.txt |Dimensions 7 and 10 hand off to **`schema`** (Product/Offer JSON-LD) and **`ai-seo`** (extractability, AI-bot access, `llms.txt`) for implementation.
references/pricing-page-teardown.md:79来自说明文档打开原文件
- **JS-only render / auth wall** — if the price only appears after interaction or login, most fetchers won't see it (only JS-rendering agents might).- **Blocked AI *search* bots** — the crawlers that feed AI *answers* are the search agents, not the training crawlers: OpenAI's `OAI-SearchBot`, Anthropic's `Claude-SearchBot` / `Claude-User`, Perplexity's `PerplexityBot`. Blocking `GPTBot` only opts out of model *training*, not ChatGPT Search — so check which bots your robots.txt actually blocks. (Bot access is `ai-seo`'s domain — hand it off there.)
references/pricing-page-teardown.md:41来自说明文档打开原文件
1. **Load context** — read `.agents/product-marketing.md` (ICP, positioning) so "clarity" is judged against the *right* buyer.2. **Fetch the page as an agent would** — get the rendered text/HTML, not a screenshot. Note immediately whether prices appear in the text (that's dimension 7).3. **Run the paste test** — ask an LLM for the plans and prices from the URL; record what it gets wrong or misses.4. **Score all 10 dimensions** Pass/Partial/Gap with a one-line reason each.
会不会删除文件或一直在后台运行?检查是否大范围删除文件、改写磁盘,或设置自动启动。未发现风险
会不会绕过安全保护?检查是否跳过网站安全验证、开放过多文件权限,或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容?检查工作说明是否要求 AI 忽略你的指令、干扰检查结果,或夹带看不见的文字。发现 1 项风险
中风险

本地营销文档可能把不受信任的指令带入代理上下文

原文依据:2 处
发现了什么

Skill 要求代理自动读取多个固定名称的 Markdown 文件,并“使用”其中内容,但没有要求把文件仅视为业务数据或忽略其中的操作指令。若仓库、模板或依赖方能写入这些文件,恶意文本可能伪装成营销背景影响代理。

为什么需要注意

代理可能偏离定价任务,泄露随后提供的信息,或建议/执行用户并未授权的操作;实际后果取决于宿主代理拥有的工具和权限。

这是会实际触发的前置步骤:代理被要求读取固定位置的项目文件,并直接使用其内容。Skill 没有说明应把这些文件仅当作业务数据、忽略其中的代理指令。因此,当仓库协作者、模板或其他工具可修改这些文件时,嵌入的提示词可能影响代理后续判断或操作;是否真正造成影响取决于文件内容及代理的指令隔离能力。用户可要求作者加入明确的数据边界和提示注入处理规则。

SKILL.md:14来自说明文档打开原文件
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md` filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task.
查看另外 1 个位置
references/pricing-page-teardown.md:41来自说明文档打开原文件
1. **Load context** — read `.agents/product-marketing.md` (ICP, positioning) so "clarity" is judged against the *right* buyer.2. **Fetch the page as an agent would** — get the rendered text/HTML, not a screenshot. Note immediately whether prices appear in the text (that's dimension 7).
会不会偷偷改推广链接或收款方?检查是否强制替换推广链接或收款对象,同时要求隐瞒更改。发现 1 项风险
中风险

通用涨价规则可能推动未经充分验证的客户迁移和可避免的流失

原文依据:5 处
发现了什么

指南建议不要永久保留旧价、先迁移 5–10% 的现有客户,并明确接受部分流失;另一处又给出“有疑问时,定价更高”的宽泛结论。这些建议没有要求先核验合同限制、客户分群、利润贡献或统计显著性。

为什么需要注意

如果经营者把经验规则直接用于生产定价,可能违反客户承诺,引发支持和续约问题,损失高价值客户或降低总收入。Skill 本身只提供建议,不会自动改价。

这些是会影响真实商业决策的建议,但不是自动执行涨价。指南虽通过先测试新客、分批迁移并观察流失来降低风险,仍明确建议不要永久保留旧价、迁移 5–10% 现有客户并接受部分流失;另一参考还给出“有疑问时定价更高”的概括。可见内容没有要求先检查合同、通知义务或客户级利润数据。若被当成通用操作规则,可能导致违约、投诉或可避免的收入损失。用户可要求在任何迁移建议前加入合同、分群和财务验证。

SKILL.md:206来自说明文档打开原文件
A price change is a rollout, not a switch you flip. Sequence it to de-risk:1. **Test on new customers first.** Raise the price only for *new* signups and watch conversion. New customers have no anchor and no relationship at stake, so they give you a clean read on whether the market accepts the number — before you touch a single existing account.2. **Don't reflexively grandfather forever.** Grandfathering feels kind, but it can leave enormous money on the table. Run the math: a customer paying **$50/mo** who *should* be at **$250/mo** is a **$2,400/yr** gap — and $200/mo you're subsidizing indefinitely across your whole base. Grandfather as a *transition* (a grace period), not a permanent exemption.3. **Roll out small, then gradually.** Move **5–10%** of existing customers to the new price first. Watch churn and support volume for a cycle, then expand in staggered waves. A staggered rollout contains the blast radius and gives you an off-ramp if churn spikes.4. **Communicate the *why*, months ahead, with a generous offer.** Tell customers why the price is changing (usually: more value shipped) well in advance. Soften it: lock-in-the-old-price-if-you-upgrade-to-annual-now, an extended grace window, or a one-time credit. Advance notice + a generous option converts a resentment moment into a loyalty one.Expect — and accept — some churn. The customers most likely to leave over a justified increase are usually your least-profitable, highest-support, most price-sensitive accounts.
查看另外 4 个位置
references/pricing-models.md:60来自说明文档打开原文件
## The Low-Price Retention CounterpointCharging too little is not the safe choice. **Low prices hurt retention** (Patrick Campbell / ProfitWell data, echoed by operators like Josh Pigford of SpyFu and Tyler Tringas): under-priced customers churn *more*, not less, because a low price signals low value and attracts the least-committed, most price-sensitive buyers.Related: the **discount-asker signal** — customers who negotiate for a discount tend to churn at roughly **2x** the rate of full-price customers. Discounting to close a deal often buys a customer who leaves anyway.**Implication:** when in doubt, price higher. It's easier to grandfather a price down than to claw one up, and a higher price selects for better-fit, longer-retained customers.
SKILL.md:208来自说明文档打开原文件
1. **Test on new customers first.** Raise the price only for *new* signups and watch conversion. New customers have no anchor and no relationship at stake, so they give you a clean read on whether the market accepts the number — before you touch a single existing account.2. **Don't reflexively grandfather forever.** Grandfathering feels kind, but it can leave enormous money on the table. Run the math: a customer paying **$50/mo** who *should* be at **$250/mo** is a **$2,400/yr** gap — and $200/mo you're subsidizing indefinitely across your whole base. Grandfather as a *transition* (a grace period), not a permanent exemption.3. **Roll out small, then gradually.** Move **5–10%** of existing customers to the new price first. Watch churn and support volume for a cycle, then expand in staggered waves. A staggered rollout contains the blast radius and gives you an off-ramp if churn spikes.4. **Communicate the *why*, months ahead, with a generous offer.** Tell customers why the price is changing (usually: more value shipped) well in advance. Soften it: lock-in-the-old-price-if-you-upgrade-to-annual-now, an extended grace window, or a one-time credit. Advance notice + a generous option converts a resentment moment into a loyalty one.
SKILL.md:213来自说明文档打开原文件
Expect — and accept — some churn. The customers most likely to leave over a justified increase are usually your least-profitable, highest-support, most price-sensitive accounts.
references/pricing-models.md:66来自说明文档打开原文件
**Implication:** when in doubt, price higher. It's easier to grandfather a price down than to claw one up, and a higher price selects for better-fit, longer-retained customers.

Skill 逻辑拆解

8 个说明模块

该 Skill 是定价咨询指南:先读取本地产品营销背景,再询问价格、目标市场、转化率、ARPU、流失率等信息,用于设计价格、套餐和价值指标。提供的文件中没有可执行脚本、安装命令或直接修改账户、价格、文件的实现。

查看原文
SKILL.md:14来自说明文档打开原文件
**Check for product marketing context first:**If `.agents/product-marketing.md` exists (or `.claude/product-marketing.md`, or the legacy `product-marketing-context.md` filename, in older setups), read it before asking questions. Use that context and only ask for information not already covered or specific to this task.Gather this context (ask if not provided):
SKILL.md:30来自说明文档打开原文件
### 3. Current Performance- What's your current conversion rate?- What's your ARPU and churn rate?- Any feedback on pricing from customers/prospects?### 4. Goals- Optimizing for growth, revenue, or profitability?- Moving upmarket or expanding downmarket?

针对定价页审计,它会评估人类购买体验和 AI 代理可读性,并要求取得页面文本或 HTML、执行外部 AI“粘贴测试”,再按影响和工作量排序改进项。

查看原文
references/pricing-page-teardown.md:39来自说明文档打开原文件
## How to run it1. **Load context** — read `.agents/product-marketing.md` (ICP, positioning) so "clarity" is judged against the *right* buyer.2. **Fetch the page as an agent would** — get the rendered text/HTML, not a screenshot. Note immediately whether prices appear in the text (that's dimension 7).3. **Run the paste test** — ask an LLM for the plans and prices from the URL; record what it gets wrong or misses.4. **Score all 10 dimensions** Pass/Partial/Gap with a one-line reason each.5. **Prioritize fixes** by impact × effort. AI-readiness gaps are often *high impact, low effort* (add text prices, add Offer schema) — surface those first.

该 Skill 提供从首发价格、研究方法、套餐设计到现有客户涨价的商业建议;部分数值是经验规则或示例,不是针对具体企业验证后的结论。

查看原文
SKILL.md:74来自说明文档打开原文件
## Initial Pricing — "Pick a Price You Can Learn From"The frameworks below (value metrics, tiers, Van Westendorp) are for optimizing a price. **On day one you don't have a price to optimize — you have a bet to place.** The goal of your first price is *learning*, not precision. Pick a number, ship it, and let real buyers tell you if it's wrong.### The $10 / $100 / $1,000 rule of thumbWhen you have nothing to go on, start with the order of magnitude that matches who you serve:- **~$10/mo** — prosumer / individual, high volume, low touch- **~$100/mo** — SMB / team tool, the SaaS default- **~$1,000/mo** — mid-market / business-critical / sales-assistedPick the bucket by **who the customer is and how much value you deliver**, then start near the round number. You can move within the bucket fast once you have signal.
references/pricing-models.md:52来自说明文档打开原文件
## The Value/Price RatioAim for roughly a **10:1 value-to-price ratio** (Ryan Kulp): the customer should perceive about **10x more value than they pay**. This is the buffer that makes the purchase feel obvious rather than negotiated, and it leaves headroom to raise prices later as you add value.If you can't articulate 10x value, the problem is usually the offer or the positioning, not the price point.
从这里开始 · 工作说明SKILL.md
pricing
连线表示工作说明包含的模块,不是实际运行顺序。点击模块可查看原文。 另有 4 个章节,可在原文件中查看。

文件引用关系图

5 处引用
哪些文件发起引用引用了什么
连线表示真实的文件引用,不是运行顺序。点击节点可高亮相关连线,并查看具体文件和原文位置。虚线表示还有文件需要定位。
文件与检查记录6 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围;纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文
  • references/pricing-models.md已纳入全文
  • references/pricing-page-teardown.md已纳入全文
  • references/research-methods.md已纳入全文
  • references/tier-structure.md已纳入全文
  • evals/evals.json已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件,没有实际运行 Skill,也没有检查它另外安装的软件包。因此,这不是“保证安全”的承诺;换了版本或使用环境,结果也可能不同。

  • SKILL.md工作说明
  • evals/evals.json配套文件
  • references/pricing-models.md配套文件
  • references/pricing-page-teardown.md配套文件
  • references/research-methods.md配套文件
  • references/tier-structure.md配套文件
读取了多少行
955
文件校验值(用于核对版本)
4d926b44f20885265f4c83d50d4e72fc3c2b611d1d454a8cfc41882c070d280b