Turn a one-line objective into a step-by-step plan any coding agent can execute cold — each step carries its own context, no prior session needed.
SaferSkills independently audited blueprint (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create a construction plan for a multi-step engineering task. $ARGUMENTS format: <project> <objective> — project name (for locating code and naming the file) and a one-line goal.
Core principle: The plan's only reader is an agent with zero prior context. Every line must serve cold-start execution — not human reporting, not status theater.
Example: /blueprint myapp "migrate database to PostgreSQL"
gh) authenticated — enables full branch/PR/CI workflow. Without them, Blueprint auto-switches to direct mode.digraph blueprint {
rankdir=TB
start [label="Objective received"]
trivial [label="< 3 tool calls?" shape=diamond]
just_do_it [label="Just do it\n(skip planning)"]
research [label="Phase 1: Research\n+ Pre-flight checks"]
conflict [label="Active plan\nexists?" shape=diamond]
ask_user [label="Ask user:\nsupersede or parallel?"]
git_check [label="Git repo +\ngh auth?" shape=diamond]
full [label="Phase 2: Design\n(branch workflow)"]
direct [label="Phase 2: Design\n(direct workflow)"]
draft_full [label="Phase 3: Draft\n(plan-template.md)"]
draft_light [label="Phase 3: Draft\n(plan-template-light.md)"]
review [label="Phase 4: Review\n(strongest → default fallback)"]
register [label="Phase 5: Register"]
start -> trivial
trivial -> just_do_it [label="yes"]
trivial -> research [label="no"]
research -> conflict
conflict -> ask_user [label="yes"]
conflict -> git_check [label="no"]
ask_user -> git_check
git_check -> full [label="yes"]
git_check -> direct [label="no"]
full -> draft_full
direct -> draft_light
draft_full -> review
draft_light -> review
review -> register
}Key branch points: If the task needs fewer than 3 tool calls, skip planning entirely. If pre-flight detects no git repo or no gh auth, use direct workflow with the light template (no branches, PRs, or CI gates). If an active plan already covers the same objective, ask the user before creating a duplicate. If the strongest model is unavailable for review, fall back to the default model.
Gather the minimum context needed to make sound design decisions.
git rev-parse --is-inside-work-tree: if false (not a git repo), set workflow mode to "direct" and skip all remaining git pre-flight checks. The skill still works for non-git tasks.gh auth status: if the command fails, warn the user and set workflow mode to "direct" (no PR/CI gates). If multiple accounts are authenticated, report all accounts and ask the user to confirm which one to use before any remote operation.git config user.name and git config user.email: if either is unset, stop and ask the user. Never auto-configure git identity — wrong attribution in commit history is permanent.git remote -v: if empty (no remote configured), warn the user and set workflow mode to "direct" — PR/CI operations are impossible without a remote. If a remote exists, record the URL protocol (SSH vs HTTPS) for reference — do not assume or switch protocol.git symbolic-ref refs/remotes/origin/HEAD 2>/dev/null | sed 's@^refs/remotes/origin/@@'. If this fails (ref not set), try git remote show origin 2>/dev/null | awk '/HEAD branch:/ {print $NF}'. Store the result as {default-branch}. If both fail, fall back to main and log the fallback in the plan's Design Decisions section. Avoid git remote set-head --auto — it modifies local refs and requires network access, which is inappropriate for a pre-flight check. Use {default-branch} throughout the plan template — never hardcode main.memory/MEMORY.md exists, read it to find the project's path and current status. If absent, rely on codebase scanning (steps 2-4 below).plans/ for the same project — avoid duplicating or contradicting active plans.Output a brief context summary (5-10 lines) before proceeding. Do not ask for confirmation — proceed to Phase 2.
Make architectural and sequencing decisions.
**Agent**: field in each step tells the executing agent which tier to use. When spawning sub-agents, select the model matching this tier (e.g., in Claude Code: model: "opus" for strongest, omit or use model: "sonnet" for default).Write the plan file at plans/{project}-{objective-slug}.md (create the plans/ directory if it does not exist: mkdir -p plans) following the template below. Generate the slug from the objective: lowercase, replace spaces with hyphens, strip characters that are not ASCII alphanumeric (a-z, 0-9) or hyphens, collapse consecutive hyphens into one, trim leading/trailing hyphens, truncate to 40 characters. If the slug is empty after processing (common for non-Latin objectives like Chinese), use plan-NN as fallback where NN is the next available two-digit sequence number (check existing files in plans/ to avoid collision). Example: "Extract providers into plugins" → extract-providers-into-plugins. Full filename example: plans/myapp-extract-providers-into-plugins.md.
The plan must be fully self-contained — an executing agent reads only the plan file and the project's CLAUDE.md. All branch workflow rules, CI policy, and review gates must be written directly into the plan. Do not reference external documents for critical workflow rules.
Read references/plan-template.md and use it as the plan structure.
If pre-flight checks set workflow mode to "direct" (non-git or no gh auth), read references/plan-template-light.md instead.
Note on non-git / docs-only plans: Use references/plan-template-light.md. Steps use direct file edits without branch/PR/CI gates.
Before finalizing, scan references/anti-patterns.md and verify the plan does not contain any listed anti-pattern.
Include an Operational References section at the bottom of the generated plan with inline summaries of the mutation and resumption protocols. Do not use file paths to the skill directory — the executing agent does not know where the skill is installed. Use the inline summaries from the plan template (read references/plan-template.md or references/plan-template-light.md — the section is already included at the bottom). The full protocol files are workflows/plan-mutation.md and workflows/resumption.md — read these during plan creation to ensure the summaries are accurate.
Delegate adversarial review of the complete plan to a strongest-model sub-agent (e.g., Opus). If the sub-agent fails (API error, timeout, unavailable model), retry once. On second failure, fall back to the default model and add a warning to the Review Log: "Reviewed by default model — reduced review depth." Never block plan creation on review infrastructure failure.
Read references/review-checklist.md and references/anti-patterns.md. Include both documents in full in the strongest-model sub-agent's prompt so it can execute each checklist item against the plan. The sub-agent does not have access to the skill's installation directory — all review criteria and anti-pattern definitions must be passed inline.
Fix all critical and important findings. Log everything in Review Log.
memory/MEMORY.md exists, update it: add a plan entry under the relevant project with created: {date} and brief description. If the file does not exist, skip memory registration.plan-format field in template header). Executing agents should note version mismatches but not refuse to execute old-format plans.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.