Agent skill · Audited from source

behavioral-product-design

skill · refoundai/lenny-skillsMIT licenceAudited 23 Oct 2026 · source b7c977844314

★ 1,435pushed 98 days ago
✕BLOCKGrade D · 69/100 · 6 findings · b7c9778
1,435repo stars · whole refoundai/lenny-skills

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit b7c977844314 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 6 findings, 2 critical or high. What it does: Help users identify unique distribution advantages and master the lifecycle of acquisition channels to build a sustainable engine for growth and retention.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “behavioral-product-design (refoundai/lenny-skills)”. Retrieved 23 Oct 2026. https://modelsatlas.com/skills/refoundai/behavioral-product-design

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 2 critical or high findings, starting with “Prompt injection” in skills/ai-product-strategy/references/guest-insights.md:628. Do not install it without reading them.

Trust audit

Audit 0.4.1 · source read 23 Oct 2026

Trust score69/100✕BLOCK D
0 critical2 high0 medium4 low0 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL6
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: instruction override, no behavioural pass.

Findings (6)

HIGHPrompt injectionprompt.override · skills/ai-product-strategy/references/guest-insights.md:628
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Red-team your products by using creative personas and scenarios to bypass safety filters.
Why
asks the agent to drop prior instructions or safety
Fix
remove the instruction
HIGHPrompt injectionprompt.override · skills/org-design/references/guest-insights.md:630
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
**Insight:** Minimize organizational overhead by structuring around tiny, parallelized teams that use AI to bypass traditional alignment bottlenecks.
Why
asks the agent to drop prior instructions or safety
Fix
remove the instruction
LOWPrompt injectionprompt.authority_framing · skills/coaching-development/references/guest-insights.md:345
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
> "The skills that make for great managers—providing clear, consistent feedback and articulating the difference between good and excellent—translate remarkably well to creating GPTs that can give your
Why
No further detail recorded for this rule.
Fix
—
LOWPrompt injectionprompt.authority_framing · skills/coaching-development/references/guest-insights.md:365
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Foster a continuous learning culture by providing the team with unlimited access to AI coaching.
Why
No further detail recorded for this rule.
Fix
—
LOWPrompt injectionprompt.authority_framing · skills/interviewing-evaluating-candidates/references/artifacts.md:1192
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Full access to internal tools: GitHub, Figma, Notion, Slack
Why
No further detail recorded for this rule.
Fix
—
LOWPrompt injectionprompt.authority_framing · skills/positioning/references/artifacts.md:524
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Spotify: 'All of the world's music – for free' — Offers unlimited access to something people previously paid per-unit for
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha b7c977844314 · 23 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherrefoundai GitHub organizationOwner of the repository this skill is read from
  • Source folderrefoundai/lenny-skillsThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdictb7c977844314A new audit runs when the source changes
  • Repository statusNot archivedLast push 98 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Help users identify unique distribution advantages and master the lifecycle of acquisition channels to build a sustainable engine for growth and retention.

---
name: acquisition-channels
description: Help users identify unique distribution advantages and master the lifecycle of acquisition channels to build a sustainable engine for growth and retention.
---

# Acquisition Channel Strategy

Identify, test, and scale the distribution engines that drive sustainable growth.

Help the user with acquisition channel strategy using insights from 18 guests and posts across Lenny's Podcast and Newsletter.

## How to Help

1. **Identify distribution advantages** - Use frameworks to determine which of the seven proven strategies align with your product and target audience.
2. **Audit channel health** - Evaluate if existing channels are reaching saturation and identify the signals for when to expand to new platforms.
3. **Optimize content strategy** - Map content production to specific distribution goals like search intent or viral social hooks.
4. **Sequence growth hiring** - Determine the right time to hire growth versus sales leaders based on your primary revenue motion.

## Core Principles

### Seek the platform trifecta
Adam Grenier: "The first is really understanding if there is an overlap between what the customers need is, what your company's goals are, and what the channel actually does really well."

Success requires finding the intersection between specific customer needs, your company goals, and the unique functional strengths of the platform.

### Exploit distribution shifts
Brian Balfour: "There's multiple ways that this can happen, but one of the major ways, one of the major, major ways that we always see is that this can happen when new distribution platforms emerge, because when new distribution platforms emerge, startups are usually the fastest to take advantage of them. It's slower for the incumbents to move. It gives startups this opportunity essentially to play this game."

Startups achieve escape velocity by identifying and moving into new channels, such as AI platforms, before established incumbents can react.

### Apply product rigor to content
Camille Ricketts: "The way that you think about product market fit, you have to think about content market fit. So even though content feels like it's running adjacent to the actual product that you're putting out there, you still have to think about who is my audience? Who is the audience that I really want to have? Who is the audience that is going to be drawn to this most?"

Treat content marketing like product development by identifying and solving the core professional anxieties of your audience.

### Sequence hires by revenue motion
Elena Verna 3.0: "If you're starting with self-serve monetization, growth hire should be frankly first before sales. ... If you have any product-led components where product is responsible for acquisition, activation, monetization or retention, that's where growth comes in."

Your hiring order should depend on whether your growth is driven by product-led self-service or human-led sales.

### Prioritize high-trust micro-influencers
Grant Lee: "You're much better doing the hard thing, which is hard to scale, finding the thousands of micro influencers that have an audience where your product maybe is actually useful. People really trust what they say. That ends up becoming this wildfire that can spread really, really fast."

Sustainable growth comes from niche creators with highly engaged audiences rather than generic scripted ads with celebrities.

### Lead with extreme relevance
Jen Abel: "If you can focus the messaging in a way that speaks to something that has a bit of shock value, or is counterintuitive, you'll get them to continue reading. So first and foremost, I usually like to open it with, which is why is this relevant for me in my role? Why are you reaching out to me?"

Effective cold outreach prioritizes a counterintuitive perspective on a specific problem over generic personalization.

### Treat performance marketing as a baseline
Timothy Davis: "Hot take, paid is for everyone. If you look at the way each platform is doing, Google, you have to scroll pretty far down to get to an organic listing. Meta, it's almost a pay for play now."

In a pay-for-play digital landscape, performance marketing is often a requirement to maintain visibility even for established brands.

### Invest in supply-side success
Laura Modi: "If we put the hosts first and we thought about building tools for them versus what do we need just to drive more bookings, users begets users, and that's exactly what we saw."

Sustainable growth in marketplaces is a byproduct of investing in the tools and experiences that help your suppliers succeed.

### Scale paid only after validation
Yuriy Timen: "If I'm seeing things like that and I'm seeing that you're converting seven, like five plus percent of your free users to a paid subscriber, then there is a big opportunity to play paid and lean into paid growth loops and paid acquisition loops."

Use paid acquisition primarily for learning until your product-market fit is proven by a free-to-paid conversion rate of at least 5%.

## Templates & Frameworks

- **Seven Distribution Advantages for Startups** (Finding your distribution advantage) - A framework of seven distinct distribution advantages that early-stage startups can leverage to get their product in front of the right people more cheaply and 
- **Seven Strategies for Acquiring Your First 1,000 Users** (How the biggest consumer apps got their first 1,000 users) - A comprehensive framework of the only seven strategies that account for how every major consumer app acquired their earliest users. Each strategy addresses a di
- **Content-Driven Growth 2x2 Framework** (Content-driven growth) - A 2x2 matrix for mapping all content-driven growth strategies based on two axes: what you're optimizing for (SEO vs. virality) and who's generating the content 
- **Six B2B Growth Channels Framework** (Scaling your B2B growth engine) - A taxonomy of six distinct growth channels for B2B startups, or

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit b7c9778

git clone https://github.com/RefoundAI/lenny-skills.git

Commands as the repository documents them: shown, never run by us. Our verdict covers commit b7c977844314 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
GitHub CopilotMentioned in its text, not testedSkills for GitHub Copilot · About GitHub Copilot
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
Gemini CLIMentioned in its text, not testedSkills for Gemini CLI · About Gemini CLI
WindsurfMentioned in its text, not testedSkills for Windsurf · About Windsurf
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✕BLOCK D 69 / 100

    first audit · source b7c977844314

README badge

For maintainers · shows the latest audit

ModelsAtlas: BLOCK DMODELSATLASBLOCK · D
[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/refoundai/behavioral-product-design/badge.svg)](https://modelsatlas.com/skills/refoundai/behavioral-product-design/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Add this badge to your README

[![ModelsAtlas: BLOCK D](https://modelsatlas.com/skills/refoundai/behavioral-product-design/badge.svg)](https://modelsatlas.com/skills/refoundai/behavioral-product-design/)

Questions about behavioral-product-design

What does the behavioral-product-design skill do?
86 product management skills from Lenny's Podcast for Claude Code and AI agents. Hiring, user research, strategy, shipping, and more.
Is behavioral-product-design safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can behavioral-product-design access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does behavioral-product-design work with?
Its documentation mentions claude-code, codex, copilot, cursor, gemini-cli and windsurf. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (b7c977844314), read on 2026-10-23. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.