Skills Explorer Add Skills

competitors-analysis

An agent skill by daymade, from daymade/claude-code-skills. Tags: analysis, code-review, github, market-analysis, research.

What it does

Discover, clone, update, and analyze competitor repositories with evidence-based competitive intelligence. Use when tracking competitors, reviewing competitor source code, adding a competitor repository, comparing product capabilities, building a competitor landscape, checking whether competitor code changed, or when the user says "竞品分析", "竞品", "competitor scan", "latest competitor code", "analyze competitor", or "compare with X". Repository-backed findings must come from local cloned code with file:line citations; market-landscape claims must cite their source and volatility.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add daymade/claude-code-skills --skill competitors-analysis

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/daymade/claude-code-skills
cp -r claude-code-skills/competitors-analysis ~/.claude/skills/competitors-analysis

Safety box score

Grade B, low risk: 21 of 100 risk points, rated 2026-09-23. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill searches GitHub, clones competitor repositories, and keeps them updated in a durable workspace under your home directory. The main risks are remote content ingestion and persistent local writes; it does not appear to require sudo, read secrets directly, or execute downloaded code itself.

Category levels, from 0 (none) to 3 (high)
CategoryLevelWhy
Code & shell execution1 (low)It ships a Bash script that runs `git`, `gh`, `sed`, and `sleep` commands (`scripts/update-competitors.sh:1,6,67-91,121-153`), but it does not evaluate arbitrary code or use `eval`/`curl | sh`.
Network access2 (moderate)It explicitly uses `gh search repos` plus `git clone`, `fetch`, and `pull` to contact GitHub and remote repository URLs (`SKILL.md:78-89`; `scripts/update-competitors.sh:121-131,142-153`).
Filesystem reach2 (moderate)Repositories are stored and updated under `$HOME/workspace/competitors/$PRODUCT_NAME/...`, so the skill writes persistent data outside the current project but within a bounded workspace (`SKILL.md:56-66`; `scripts/update-competitors.sh:8-12,67-91,142-153`).
Secrets & credentials0 (none)The files do not ask for passwords, tokens, `.env` contents, keychains, or browser sessions, and they do not read secret stores directly.
Privilege & persistence0 (none)There is no sudo, system service, global install, shell startup editing, or OS-level configuration change in the skill or script.
Instruction hijack surface0 (none)The instructions emphasize explicit targets and aborting when missing input; they do not instruct the agent to ignore rules, hide actions, or follow remote instructions (`SKILL.md:22-31`).
Irreversible actions1 (low)It can automatically discover, clone, fetch, and pull competitor repos once given a target, which changes local state without a separate confirmation step, but it does not post, deploy, pay, or delete anything.
Transparency0 (none)All shipped files are readable text; there are no binaries, base64 blobs, or unpinned downloader patterns.

Before installing

Rated 2026-09-23 by an automated review of 4 files from the skill's repository.

Source

Repository
daymade/claude-code-skills (all skills from this repository)
Path
competitors-analysis/SKILL.md
Branch
main
Updated
2026-09-20