Install
$ agentstack add skill-jccidc-plan-enforcer-plan-enforcer-review ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Plan Enforcer Review
Use this before execution when the user wants a plan quality check.
Public front-end flow is discuss -> draft -> review.
Goal
Review a plan file or plan text and answer one question:
Is this plan safe enough to enforce as-is?
Plan Enforcer should not blindly enforce weak plans. Review first when quality is uncertain.
What To Check
Look for:
- vague tasks ("cleanup", "improve", "refactor" without a concrete target)
- missing verification steps
- tasks that are too broad or hide multiple changes
- sequencing risks (ship/deploy before verification)
- migration/integration work without explicit dependencies
- missing guardrails such as assumptions, constraints, or out-of-scope notes
- docs/examples that look like plan tasks but are not meant to execute
- drift from the discuss packet at
.plan-enforcer/discuss.md
(or the legacy .plan-enforcer/combobulate.md fallback) when an intent packet exists:
- dropped non-negotiables
- missing proof requirements
- forbidden narrowings adopted by the plan
- goal text that no longer preserves the normalized goal
Output Shape
Start with a verdict:
pass-- safe to executeweak-- executable, but needs edits firstunsafe-- do not execute yet
Then list findings in severity order with concrete fixes.
Preferred structure:
Verdict: weak
Findings:
- T2 is vague: "Improve backend" -> name the exact subsystem and intended behavior
- T3 has no verification step -> add a concrete check, test, or manual proof
- Deploy appears before verification -> move release after the proving step
Auto-repair suggestions:
- Rewrite T2 as: "Update the Express auth middleware to reject expired sessions."
- Add under T3: "- [ ] Verify `npm test -- auth` passes"
Suggested repair block:
Behavior
- At stage start, set the statusline stage to
3-REVIEWwith:
node "$HOME/.claude/skills/plan-enforcer/src/statusline-stage-cli.js" review --label 3-REVIEW
- If the user provides a path, read that plan.
- If the user provides inline plan text, review it directly.
- If the installed CLI is available, prefer running
node ~/.claude/skills/plan-enforcer/src/review-cli.jsso the verdict, findings, and repair block match the shared formatter exactly. - When reviewing a file path, also look for the discuss packet at
.plan-enforcer/discuss.md near the repo root, falling back to the legacy .plan-enforcer/combobulate.md path when needed, and treat packet-to-plan drift as a first-class review finding.
- If the plan is weak or unsafe, propose the minimum repair needed.
- Prefer specific replacement text over abstract advice when you can.
- If one or two tasks are broken, rewrite just those tasks.
- If the whole plan is weak, provide a short repair block the user can paste back into the plan.
- Always include a
Suggested repair block:section when the verdict isweakorunsafe. - Do not execute the plan while reviewing it unless the user explicitly asks for both review and execution.
Positioning
This is not a heavyweight planning framework. It is a guardrail:
discussclarifies ambiguous asks firstdraftwrites the planreviewchecks the plan- enforcer keeps execution honest
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: jccidc
- Source: jccidc/.plan-enforcer
- License: MIT
- Homepage: https://www.jccidc.com/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.