Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Business Analyst

ASecurity

Perform business analysis — requirements gathering, process mapping, gap analysis, and stakeholder-ready documentation.

2 stars
0 votes
0 copies
0 views
Added 9/29/2026
ai-agentsgogitsecurityperformancedocumentation

Security Analysis

A100/100

Scanned 9/29/2026

$npx -y skills add aicodedecode/awesome-muse-skills --skill business-analyst --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Business Analyst?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Business Analyst
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aicodedecode-business-analyst/badge)](https://www.skillsdirectory.com/skills/aicodedecode-business-analyst)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: business-analyst
description: Perform business analysis — requirements gathering, process mapping, gap analysis, and stakeholder-ready documentation.
category: business-marketing
---

## Overview

Business analysts bridge business needs and solutions: eliciting requirements, mapping processes, analyzing gaps, and documenting specifications that teams can build from. This skill covers the BA toolkit — stakeholder analysis, requirements elicitation, process modeling, and the documentation standards that prevent expensive misunderstandings.

## When to use

- Gathering requirements for a new system or feature
- Mapping and improving a business process
- Writing BRDs, FRDs, or user stories with acceptance criteria
- Analyzing gaps between current and desired state
- Evaluating build-vs-buy or vendor options
- Preparing stakeholder presentations on findings

- Evaluating build-vs-buy decisions
- Documenting as-is processes before automation
- Facilitating prioritization across competing stakeholders
## Core concepts

**Stakeholder analysis.** Map stakeholders by influence and interest. High-influence stakeholders need active management; high-interest ones need information. Missing a key stakeholder early guarantees rework later.

**Requirements elicitation.** Interviews, workshops, observation, document analysis, surveys. The 5 Whys get past stated wants to real needs. Distinguish business requirements (why), stakeholder requirements (what), and solution requirements (how, functional + non-functional).

**SMART requirements.** Specific, Measurable, Achievable, Relevant, Time-bound — or at minimum: unambiguous, testable, and traceable. "The system should be fast" is not a requirement; "95th percentile response under 2 seconds at 100 concurrent users" is.

**Process modeling.** As-is vs. to-be flows (swimlane diagrams showing handoffs between roles), pain points marked on the as-is, improvements designed into the to-be. Every handoff is a failure point — minimize them.

**Gap analysis.** Current state → desired state → the gap → options to close it → recommendation with costs/benefits/risks. Structured, comparable, decision-ready.

**Traceability.** Every requirement traces to a business need and forward to a test case. Untraceable requirements are how scope creep and untested features happen.


**RACI for requirements.** For each requirement or deliverable, define who is Responsible, Accountable, Consulted, and Informed. Requirement disputes usually trace to unclear accountability — RACI assigned at elicitation time prevents the "I thought you were handling that" failure mode.

**Non-functional requirements (NFRs).** Performance, security, scalability, usability, accessibility, compliance, and maintainability. NFRs are where projects silently fail: the system works but is too slow, insecure, or unusable. Elicit NFRs with the same rigor as functional ones, and quantify every one.

**MoSCoW prioritization.** Must have (non-negotiable for go-live) → Should have (important, not critical) → Could have (nice if time) → Won't have (explicitly out of scope).
The power is in the Won't list — explicit exclusion prevents scope creep disguised as clarification.
Revisit MoSCoW at each phase gate; priorities legitimately shift as learning happens.
**Traceability.** Link every requirement to its source (stakeholder, regulation, business goal) and to its test.
When requirements change — and they will — traceability shows exactly what else is affected.
Tools help, but even a simple matrix beats tribal memory.
**Gap analysis.** Current state → future state → the gap between them, itemized as changes required (process, people, technology).
Most failed transformations skipped honest gap analysis and discovered the gaps mid-implementation.
## Practical workflow

1. **Define scope and stakeholders.** What's in/out, who's affected, who decides. Get scope sign-off in writing before elicitation.
2. **Elicit requirements.** Run structured interviews and workshops. Ask about the current process, pain points, and what "good" looks like — not just feature requests. Observe the work being done; people omit steps they do unconsciously.
3. **Model the processes.** Draw as-is swimlanes. Validate with the people who do the work. Design to-be with pain points addressed. Get sign-off on both.
4. **Document specifications.** BRD (business need, scope, success criteria), functional requirements (numbered, testable), non-functional requirements (performance, security, usability, compliance), user stories with acceptance criteria for agile teams.
5. **Validate and prioritize.** Walk through requirements with stakeholders. Prioritize with MoSCoW (Must/Should/Could/Won't). Get formal sign-off — this is your change-control baseline.
6. **Support delivery.** Answer builder questions, manage change requests (impact-assess every change), verify delivered work against acceptance criteria.

**User story format:** As a [role], I want [capability], so that [benefit]. Acceptance criteria in Given/When/Then. Each story independently testable and sized for one sprint.


**Workshop facilitation format (90 minutes):** 10 min framing and ground rules → 20 min current-state painstorm (silent writing, then share) → 25 min future-state vision (what does good look like?) → 20 min prioritization (dot voting on improvements) → 15 min next steps and owners. Send pre-reads; capture decisions live on a shared screen.

**Requirements document structure:** background and objectives → scope (in and out) → stakeholders → functional requirements (numbered, testable) → non-functional requirements (quantified) → assumptions and constraints → acceptance criteria → glossary.
Number every requirement (REQ-001) — unnumbered requirements cannot be tracked, tested, or changed systematically.
**Sign-off ritual:** walk stakeholders through requirements → capture objections live → revise → get explicit written sign-off.
Verbal agreement evaporates; written sign-off (even an email) anchors accountability.
## Common pitfalls

- **Solutioneering.** Jumping to solutions before understanding the problem. Elicit needs, not features.
- **Missing stakeholders.** The person who wasn't consulted becomes the person who blocks go-live.
- **Vague requirements.** "User-friendly", "robust", "flexible" — untestable words that cause disputes. Quantify everything.
- **No scope baseline.** Without signed-off scope, every new request feels reasonable and the project never ends.
- **Skipping the as-is.** Designing to-be without understanding current reality produces elegant solutions to wrong problems.
- **Documentation nobody reads.** 200-page BRDs gather dust. Right-size docs for the audience; visual models beat paragraphs.
- **Weak change control.** "Small" changes accumulate into scope explosions. Impact-assess and approve every change.
- **Accepting the first stated requirement.** Stakeholders describe solutions ("we need a dashboard") not needs ("we need to spot at-risk accounts weekly"). Keep asking why until you reach the real need.
- **No definition of done.** Requirements without acceptance criteria are never truly finished. Every requirement ships with testable criteria.
- **Gold-plating.** Adding nice-to-have requirements nobody asked for. Every requirement traces to a stakeholder need or it gets cut.
- **Analysis paralysis.** Perfecting documentation while the project stalls. Timebox analysis; ship the 80% version and iterate.

Attribution

aicodedecodeaicodedecode
View sourceSee grades on GitHubMore from aicodedecode →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698621 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →