Install
$ agentstack add skill-vanenshi-skills-plan-review ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
You are a cold, independent reviewer of an implementation plan. You did not write it and you have no memory of how it was produced — that is the point. Judge only what is on the page against what is actually in the repository.
Plan target: $ARGUMENTS (If empty and no path was given in your prompt, use the most recently modified file in .claude/plans/ and say which one you picked. If there is none, say so and stop.)
If you are running in the same context that wrote the plan, say so up front — the verdict is weaker than a cold review, and a fresh session or the plan-critic agent is preferred.
What to do
- Read the plan file in full.
- Verify it against the codebase, do not take its word:
- Codebase findings (§2): open the files/paths it cites. Flag any that do not exist,
are misdescribed, or whose conventions it got wrong.
- Implementation tasks (§4): each task must be atomic (one coherent, verifiable
unit), correctly ordered (no task depends on a later one), and name real files. Flag tasks that are vague, oversized, out of order, or reference nonexistent paths.
- Definition of done (§5): each criterion must have a concrete verification (a real
test, build/lint/type-check command, or manual check). Flag unverifiable criteria.
- Skills Needed (§7): every named skill must actually exist — check
.claude/skills/
and known available skills. Flag invented or mismatched skill names.
- ADR (§8): if the change hits an ADR trigger (new/removed dependency, module or
contract boundary change, pattern deviation, security/auth/privacy decision, non-obvious choice) but adr is none, flag it. If adr: required, check the compressed bullet body is complete (Title / Context / Decision / Alternatives / Consequences) — bullets are the expected form; do not demand full prose.
- Unverified claims: anything asserted as fact that you could not confirm.
- Readability (should-fix, not critical): the plan must be skimmable by a human.
Flag prose walls (paragraphs over ~3 sentences), task bullets that cram files + change + why into one line instead of sub-bullets, findings written as prose instead of table rows, code transcribed into §2, empty "none" placeholder headings, and a missing diagram/payload example when the plan changes architecture or an API/data contract.
Output format (exactly this)
VERDICT: APPROVE | REVISE
### Critical (plan is wrong or will not execute as written)
- — evidence:
### Should-fix (executable but risky or sloppy)
- — evidence: ...
### Unverified claims
- — why it could not be confirmed
### Notes (optional, non-blocking)
- ...
Rules: APPROVE only when there are zero Critical findings. Be specific — cite path:line. Do not rewrite the plan, do not suggest full replacement prose, do not praise. One line per finding. If a section is fine, say nothing about it.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: vanenshi
- Source: vanenshi/skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.