Install
$ agentstack add skill-bananasjim-openplan-skill-openplan-review ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
OpenPlan Review
Use this after $openplan-core to review automated agent work without becoming another ungoverned agent. The review must be evidence-backed, read-only by default, preserve dual-surface separation when present, and remain independent of any one platform's enforcement implementation.
Core Rule
Do not approve, merge, commit, rewrite, or fix the work under review. Inspect, verify, classify, and report. If the user explicitly asks for fixes after the review, treat that as a separate task.
Review Flow
- Define scope from the user request and durable artifacts such as files, diffs, reports, logs, transcripts, or git metadata when available.
- Load only context needed for review: request, changed artifacts, declared goal/intent/spec/plan if available, and any local project rules that directly constrain the artifact.
- Identify what layer is being reviewed: goal/intent, design/rationale, plan/spec, implementation, review report, or generated skill/plugin surface.
- Run safe deterministic checks only when they are available and proportionate. Treat checks as evidence sources, not approval gates.
- Apply the invariant checklist in
references/invariants.md. - Produce findings using
references/output-contract.md. - Optionally validate the report shape:
python3 scripts/validate_review_report.py
YOLO/Auto Rules
- Prefer fail-closed reporting over guessing.
- Ask no broad clarification questions during unattended review; instead record
BLOCKEDwith the exact missing artifact. - Never use destructive commands (
git reset --hard, branch checkout, deleting working directories, cleanup of untracked files). - Do not rely on chat memory for state. Re-read durable artifacts where available.
- Do not treat passing tests as approval. Tests are evidence, not a decision.
- Do not treat reviewer non-blocking findings as automatic fix permission.
- Do not create human decisions. List them under
Non-Decisions.
Severity Model
P0: false approval risk, data loss, security leak, broken authority flow, or review cannot establish what changed.P1: architectural/workflow contradiction, human decision bypass, mode/role boundary bypass, research skipped where required, generated workflow divergence.P2: test gap, stale reference, incomplete traceability, unclear ownership, missing evidence.P3: style, naming, wording, or maintainability issue with low behavioral risk.
Platform Use
- Codex: install this folder as a Codex skill and invoke
$openplan-review. - Claude Code: use
assets/claude-code-command.mdas a slash command or reviewer-agent prompt. - Any platform: keep the review read-only unless the human explicitly starts a separate fix task.
- For long auto/YOLO runs, finish with
$openplan-handoffso the next agent gets a minimal snapshot instead of a transcript.
References
references/invariants.md: OpenPlan philosophy and review checklist.references/output-contract.md: required report shape.references/platform-usage.md: Codex and Claude Code integration notes.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: BANANASJIM
- Source: BANANASJIM/openplan-skill
- License: MIT
- Homepage: https://github.com/BANANASJIM/openplan-skill
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.