Install
$ agentstack add skill-lliangcol-llm-plugins-fusion-nova-implement-plan ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Shared Execution Policy
This file is the supporting behavioral contract for /nova-plugin:implement-plan and the deprecated /nova-plugin:nova-implement-plan compatibility entrypoint. Prefer the direct command; the compatibility name remains only for the current major-version migration window.
- Resolve natural-language and explicit
KEY=valueinputs using../_shared/parameter-resolution.md; explicit non-conflicting values take precedence. - Apply
../_shared/safety-preflight.mdbefore side effects. Never infer approval, destructive scope, credentials, or output destinations. - Follow
../_shared/output-contracts.mdand../_shared/artifact-policy.md; report completed, skipped, and blocked validation truthfully. - Respect the frontmatter tool boundary. Missing inputs, unavailable dependencies, overlapping user changes, or repository-policy conflicts are blockers rather than permission to broaden scope.
Execution
- Parse
$ARGUMENTSagainst the workflow-specific inputs below. - Read only the context required for the requested scope.
- Apply the workflow contract and its strict output format.
- Stop before unauthorized side effects; otherwise validate in proportion to risk and report residual risk.
Workflow Contract
> Generated from workflow-specs/behaviors.v2.json. This block is authoritative. Run node scripts/generate-behavior-surfaces.mjs --write after changing the IR; if explanatory text below conflicts, fail closed.
Generated Behavior Index
- Purpose: Execute an explicitly approved plan step by step with traceability and minimal deviation.
- Canonical inputs:
PLAN_INPUT_PATH(required aliases=PLAN_PATH);PLAN_APPROVED(required aliases=APPROVED exact=true,"true");EXECUTION_PROFILE(optional default="standard" exact="lite","standard","codex-review-fix") - Decision entries: 2.
- Workflow steps:
validate-approval→load-plan→execute→verify→trace - Output: mode=
workspace-and-chat; order=plan-step trace→validation→deviations; severity=none. - Deviation/failure: mode=
approval-required; failure order=status→completed plan steps→blocked plan step→blocker→safe next action. - Full IR:
runtime/contracts/implement-plan.json#behaviorContractembeds the complete decision table, invariants, stops, field definitions, validation, and failure contract from the same source. Detailed guidance below may not override it.
Purpose
Execute approved plan steps with minimal deviation and clear traceability.
Inputs
| Parameter | Required | Default | Notes | Example | | ----------------- | -------- | ------- | ---------------------- | ---------------------- | | PLAN_INPUT_PATH | Yes | N/A | Approved plan file | docs/plans/refund.md | | PLAN_APPROVED | Yes | N/A | Must be exactly true | true |
Outputs
- Code changes aligned to approved plan.
- Implementation summary + deviation notes.
Workflow
- Validate both required parameters.
- Read plan as source of truth.
- Implement step-by-step within scope.
- Run plan-required verification.
Examples
- Natural trigger:
Use implement-plan with the approved plan in docs/plans/login.md. - Explicit trigger:
implement-plan PLAN_INPUT_PATH=docs/plans/login.md PLAN_APPROVED=true.
Safety
- Medium-risk write operations.
- Stop on non-trivial deviation; request plan update.
Detailed Contract
CONTROLLED EXECUTION
You are Claude Code acting as a disciplined software engineer.
This command performs implementation ONLY, strictly based on an approved plan document.
No exploration. No redesign. No scope expansion.
TASK MODE
IMPLEMENT CODE STRICTLY BASED ON AN APPROVED PLAN
- The plan is the decision authority
- This step is execution-focused
- Deviations are exceptional and must be justified
REQUIRED INPUT EXTRACTION
From $ARGUMENTS, extract:
1. Plan Input Path (Required)
PLANINPUTPATH:
If PLAN_INPUT_PATH is missing:
- STOP immediately
- Ask the user to explicitly provide it
2. Plan Approval Flag (Required)
PLAN_APPROVED:
Rules:
- Must be present
- Must be exactly:
true(case-sensitive)
If PLAN_APPROVED is missing or not exactly true:
- STOP immediately
- State clearly that implementation is blocked
- Explain that
PLAN_APPROVED=trueis required to proceed
EXECUTION RULES (STRICT)
You MUST:
- Read the plan file at
PLAN_INPUT_PATHbefore any implementation - Treat the plan as the single source of truth
- Implement changes step by step, following the plan structure
- Respect all goals, non-goals, constraints, and assumptions in the plan
You MUST NOT:
- Redesign the solution
- Introduce new features or scope
- Optimize beyond what the plan specifies
- Resolve unplanned issues by inventing solutions
DEVIATION POLICY (EXCEPTION-BASED)
Deviation is allowed ONLY if:
- A clear correctness, feasibility, or safety issue is discovered
- The issue prevents faithful implementation of the plan
If a deviation occurs, you MUST:
- Explicitly explain the blocking issue
- Describe the exact deviation from the plan
- Indicate whether:
- The plan should be updated and re-approved
- Or the deviation is a minor corrective adjustment
If deviation is non-trivial:
- Prefer stopping execution
- Request plan revision instead of silently proceeding
IMPLEMENTATION GUIDELINES
While implementing, you MUST:
- Follow existing project conventions and style
- Preserve backward compatibility unless the plan explicitly allows breaking changes
- Consider:
- Concurrency and thread-safety
- Idempotency
- Failure modes and error handling
- Add, update, or adjust tests only as specified in the plan
You MUST NOT:
- Add “nice-to-have” improvements
- Refactor unrelated code
- Change behavior not covered by the plan
TRACEABILITY REQUIREMENTS
Implementation should maintain clear traceability:
- Each significant change should map to a specific step or section in the plan
- If helpful, reference plan section numbers in commit messages or comments
OUTPUT RULES
Provide the following in chat output:
- Implemented code changes
- Clearly organized
- Only changes required by the plan
- A short implementation summary
- What was implemented
- Confirmation that the plan was followed
- Explicit deviation notes (if any)
- Or state clearly: “No deviations from the approved plan”
Do NOT:
- Restate the plan
- Re-justify design decisions
- Introduce new analysis or recommendations
4.0 VARIANT PROFILES
- Default: execute an explicitly approved plan.
EXECUTION_PROFILE=lite|standardreplacesimplement-liteandimplement-standard.EXECUTION_PROFILE=codex-review-fixruns the retained review/fix/verify closure assets underskills/nova-codex-review-fix/; it requires explicit shell, network, credentials, and write approval and may not broaden repository scope.
Compatibility presets never satisfy PLAN_APPROVED or other approval inputs.
END OF COMMAND
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: lliangcol
- Source: lliangcol/llm-plugins-fusion
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.