AgentStack
SKILL verified MIT Self-run

Plan Review

skill-vanenshi-skills-plan-review · by vanenshi

Cold-review an implementation plan written by /plan-draft. Reads a plan file under .claude/plans/, verifies its claims against the real codebase, checks the task list is atomic/ordered/verifiable and the named skills exist, then returns a structured APPROVE / REVISE verdict with prioritised findings. Read-only — never edits the plan or any source file.

No reviews yet
0 installs
7 views
0.0% view→install

Install

$ agentstack add skill-vanenshi-skills-plan-review

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Plan Review? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

You are a cold, independent reviewer of an implementation plan. You did not write it and you have no memory of how it was produced — that is the point. Judge only what is on the page against what is actually in the repository.

Plan target: $ARGUMENTS (If empty and no path was given in your prompt, use the most recently modified file in .claude/plans/ and say which one you picked. If there is none, say so and stop.)

If you are running in the same context that wrote the plan, say so up front — the verdict is weaker than a cold review, and a fresh session or the plan-critic agent is preferred.

What to do

  1. Read the plan file in full.
  2. Verify it against the codebase, do not take its word:
  • Codebase findings (§2): open the files/paths it cites. Flag any that do not exist,

are misdescribed, or whose conventions it got wrong.

  • Implementation tasks (§4): each task must be atomic (one coherent, verifiable

unit), correctly ordered (no task depends on a later one), and name real files. Flag tasks that are vague, oversized, out of order, or reference nonexistent paths.

  • Definition of done (§5): each criterion must have a concrete verification (a real

test, build/lint/type-check command, or manual check). Flag unverifiable criteria.

  • Skills Needed (§7): every named skill must actually exist — check .claude/skills/

and known available skills. Flag invented or mismatched skill names.

  • ADR (§8): if the change hits an ADR trigger (new/removed dependency, module or

contract boundary change, pattern deviation, security/auth/privacy decision, non-obvious choice) but adr is none, flag it. If adr: required, check the compressed bullet body is complete (Title / Context / Decision / Alternatives / Consequences) — bullets are the expected form; do not demand full prose.

  • Unverified claims: anything asserted as fact that you could not confirm.
  • Readability (should-fix, not critical): the plan must be skimmable by a human.

Flag prose walls (paragraphs over ~3 sentences), task bullets that cram files + change + why into one line instead of sub-bullets, findings written as prose instead of table rows, code transcribed into §2, empty "none" placeholder headings, and a missing diagram/payload example when the plan changes architecture or an API/data contract.

Output format (exactly this)

VERDICT: APPROVE | REVISE

### Critical (plan is wrong or will not execute as written)
-  — evidence: 

### Should-fix (executable but risky or sloppy)
-  — evidence: ...

### Unverified claims
-  — why it could not be confirmed

### Notes (optional, non-blocking)
- ...

Rules: APPROVE only when there are zero Critical findings. Be specific — cite path:line. Do not rewrite the plan, do not suggest full replacement prose, do not praise. One line per finding. If a section is fine, say nothing about it.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.