Install
$ agentstack add skill-maxedapps-agent-skills-implement-plan ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Implement Plan
Hard rules
- Stay on the plan’s required outcome. Discovery/review do not add scope.
- Prefer the smallest behavior-preserving change. Skip unnecessary abstractions/tests/safeguards.
- Delegate by default when safe. “Small/easy” is not a reason to skip subagents.
- Leverage subagents — built-in, extensions/plugins, or skills. Follow
use-subagentspolicy; use native subagents, extensions / plugins, or other skills - Main agent owns: tracker, integration, dispositions, acceptance, user comms, cleanup.
- Child handoffs = evidence, never acceptance. Inspect diffs; rerun checks.
- Findings /
decomplexrecs never auto-create work — disposition first. - Material doubt, scope/risk choices, or stuck review loops → ask user.
- Never fake
Complete.
Startup (blocking)
- Read the full plan (offset if truncated).
- Read [
assets/progress-tracker-template.md](assets/progress-tracker-template.md) with the file tool (memory doesn’t count). - Leverage subagents — built-in, extensions/plugins, or via skills.
- Copy/adapt tracker into the plan or a standalone file.
- Map every actionable plan requirement → tracker rows (split compound work into tasks/subtasks).
- Record
Template loaded from: implement-plan/assets/progress-tracker-template.md. - Only then implement.
On resume: repeat startup and reconcile. Missing template → stop.
Task loop
For each dependency-ready task/subtask (delegate by default):
- Analyze — read starts-at paths, callers, tests; research only if needed (
web-researchwhen third-party/current behavior is uncertain). - Implement — smallest change that satisfies the row; stay in ownership; record deviations.
- Check — targeted tests + applicable lint/typecheck/build/migration/browser (
agent-browserfor UI). - Review — independent
code-reviewwhen the task crosses a real boundary, or when the batch/phase completes; always for final full-plan review. - Disposition findings:
Fix now·Validate·Reject·Ask user·Block- Fix accepted items (delegate); rerun checks; focused re-review until
Clear - Complexity-increasing fix →
decomplextriage if available, else built-in gate; doubt → ask user - Two failed rounds / recurrence / no progress → ask user
- Update tracker —
Verifiedneeds evidence;Descopedneeds user approval. - Cleanup lane resources per
use-subagents(and launcher runtime cleanup, e.g. Piclean, if used) — no unaccounted workflow-owned resources. - Next ready task/subtask.
Parallelize only independent tasks with isolated writers. Parent is sole tracker writer under concurrency.
When to review
- After major boundaries: integration, migration, public contract, security/data invariant, risky dep, delivery milestone
- Plan-authored checkpoints
- Final full-plan review (plan-backed)
Fresh reviewers; don’t share conclusions pre-handoff. One reviewer default. Parent review only if independent review is unavailable — record the limit.
Reviewer states: Clear · Changes required · Human decision required · Blocked
Done
- Reread full plan — no missed requirements.
- No row
Pending/In progress/Blocked. - Diff hygiene — drop unjustified scope/complexity.
- Final checks + final plan-backed review (+
decomplexAudit of this diff if proportionate). - Final cleanup — worktrees, branches, processes, runtime state.
- Report truthfully.
Complete only when all rows are Verified or approved Descoped, validation passed, final review is Clear, and nothing material remains open. Else Partial or Blocked.
Report
- plan/tracker paths · status · remaining IDs
- what was delegated vs parent-owned (and why)
- checks run / skipped
- review outcomes + dispositions
- decisions, deviations
- worktrees created/integrated/removed · retained resources + why
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: maxedapps
- Source: maxedapps/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.