Developer relations teams can spread limited capacity across activities without a clear business purpose. This skill guides interviews and decisions into a focused, reviewable charter.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "devrel-strategy" from https://skillstore.io/skills/samber-devrel-strategy.md and its manifest at https://skillstore.io/api/skills/samber-devrel-strategy/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.
Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
All 39 static findings are false positives from business terminology, Markdown formatting, and related-skill references. No evidence found of executable commands, reconnaissance, data exfiltration, or prompt injection in the five reviewed files. The skill requests task-context persistence and optional public-source browsing, both related to its strategy workflow.
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
samber. (2026). devrel-strategy security audit report (audit version 1) [Author version 1.0.1]. Skillstore. https://skillstore.io/skills/samber-devrel-strategy/audits/1
BibTeX citation
@techreport{samber-samber-devrel-strategy-2026,
author = {samber},
title = {devrel-strategy security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/samber-devrel-strategy/audits/1},
note = {Author version 1.0.1}
}
CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "devrel-strategy security audit report (audit version 1)"
version: "1.0.1"
type: report
authors:
- name: "samber"
date-released: "2026-10-25"
url: "https://skillstore.io/skills/samber-devrel-strategy/audits/1"
identifiers:
- type: other
value: "skillstore:samber-devrel-strategy:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this scoreEvidence Confidence: Medium
45
Architecture
100
Maintainability
87
Content
65
Community
100
Spec Compliance
What You Can Build
Start a funded program
Identify the sponsor, audience, initial priorities, and capacity limits before committing to new developer relations activities.
Refocus an overloaded team
Replace an expanding activity list with a small set of funded initiatives, clear exclusions, and a justified next capability.
Prepare for an executive review
Connect program investment to observable developer problems and prepare an executive narrative with review dates and unresolved assumptions.
Try These Prompts
Begin the strategy interview
We are starting DevRel for [product] with [team capacity]. Interview me one question at a time to establish our funding driver and constraints.
Compare program directions
Our sponsor wants [outcome] by [date]. Developers struggle at [journey step]. Compare feasible program archetypes for [capacity] and explain their trade-offs.
Choose sourcing and staffing
Our chosen direction is [archetype], with initiatives [list]. Compare sourcing options, retain credibility-sensitive work internally, and propose the next capability with its trigger.
Build and challenge the charter
Using [program context], develop our charter section by section. Check goal traceability, capacity, sourcing, exclusions, and review triggers. Label assumptions and adjustable baselines.
Best Practices
Confirm the funding owner, deadline, capacity, and budget scope before selecting activities.
Connect every initiative to a primary goal, named owner, observable signal, and review date.
Label assumptions and adjustable baselines, and review the charter when the sponsor or product context changes.
Avoid
Copying a large company by spreading a small team evenly across all four pillars.
Treating a calendar of posts, events, and community launches as a strategy without observed developer problems.
Outsourcing technical judgment, incident communication, or advocacy voice to increase output.
Frequently Asked Questions
What does this skill produce?
It produces a short DevRel charter covering position, funding, goals, audience, priorities, sourcing, staffing, exclusions, open questions, executive messaging, and review.
What information should I provide?
Provide your product, adoption path, sponsor, team capacity, existing assets, budget scope, deadline, and constraints. The skill asks clarifying questions.
Does it create detailed budgets or dashboards?
No. It assigns one signal per initiative and refers detailed budget allocation, measurement frameworks, and organization design to related skills.
Are its numeric rules industry benchmarks?
No. Capacity limits and goal counts are adjustable starting baselines. Historical survey figures require attribution and should not become automatic targets.
Does it require web access or save business context?
Browsing is optional for checking public references. It requests context storage in available memory or a local file; avoid retaining sensitive information.
Can I use it with Claude, Codex, or Claude Code?
The skill declares support for all three. Available browsing and persistence features depend on the host environment.