AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Plan Enforcer Review

skill-jccidc-plan-enforcer-plan-enforcer-review · by jccidc

Public third step after `discuss` and `draft`. Use when reviewing an implementation plan before execution --- finds vague tasks, missing verification, sequencing gaps, and dependency risks so bad plans do not flow into enforcement unchanged.

No reviews yet
0 installs
25 views
0.0% view→install

Install

$ agentstack add skill-jccidc-plan-enforcer-plan-enforcer-review

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-jccidc-plan-enforcer-plan-enforcer-review)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
5mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Plan Enforcer Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Plan Enforcer Review

Use this before execution when the user wants a plan quality check.

Public front-end flow is discuss -> draft -> review.

Goal

Review a plan file or plan text and answer one question:

Is this plan safe enough to enforce as-is?

Plan Enforcer should not blindly enforce weak plans. Review first when quality is uncertain.

What To Check

Look for:

  • vague tasks ("cleanup", "improve", "refactor" without a concrete target)
  • missing verification steps
  • tasks that are too broad or hide multiple changes
  • sequencing risks (ship/deploy before verification)
  • migration/integration work without explicit dependencies
  • missing guardrails such as assumptions, constraints, or out-of-scope notes
  • docs/examples that look like plan tasks but are not meant to execute
  • drift from the discuss packet at .plan-enforcer/discuss.md

(or the legacy .plan-enforcer/combobulate.md fallback) when an intent packet exists:

  • dropped non-negotiables
  • missing proof requirements
  • forbidden narrowings adopted by the plan
  • goal text that no longer preserves the normalized goal

Output Shape

Start with a verdict:

  • pass -- safe to execute
  • weak -- executable, but needs edits first
  • unsafe -- do not execute yet

Then list findings in severity order with concrete fixes.

Preferred structure:

Verdict: weak

Findings:
- T2 is vague: "Improve backend" -> name the exact subsystem and intended behavior
- T3 has no verification step -> add a concrete check, test, or manual proof
- Deploy appears before verification -> move release after the proving step

Auto-repair suggestions:
- Rewrite T2 as: "Update the Express auth middleware to reject expired sessions."
- Add under T3: "- [ ] Verify `npm test -- auth` passes"

Suggested repair block:

Behavior

  • At stage start, set the statusline stage to 3-REVIEW with:

node "$HOME/.claude/skills/plan-enforcer/src/statusline-stage-cli.js" review --label 3-REVIEW

  • If the user provides a path, read that plan.
  • If the user provides inline plan text, review it directly.
  • If the installed CLI is available, prefer running node ~/.claude/skills/plan-enforcer/src/review-cli.js so the verdict, findings, and repair block match the shared formatter exactly.
  • When reviewing a file path, also look for the discuss packet at

.plan-enforcer/discuss.md near the repo root, falling back to the legacy .plan-enforcer/combobulate.md path when needed, and treat packet-to-plan drift as a first-class review finding.

  • If the plan is weak or unsafe, propose the minimum repair needed.
  • Prefer specific replacement text over abstract advice when you can.
  • If one or two tasks are broken, rewrite just those tasks.
  • If the whole plan is weak, provide a short repair block the user can paste back into the plan.
  • Always include a Suggested repair block: section when the verdict is weak or unsafe.
  • Do not execute the plan while reviewing it unless the user explicitly asks for both review and execution.

Positioning

This is not a heavyweight planning framework. It is a guardrail:

  • discuss clarifies ambiguous asks first
  • draft writes the plan
  • review checks the plan
  • enforcer keeps execution honest

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.