openplan-core — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openplan-core (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this as the base layer for other OpenPlan-style skills. It is deliberately independent of any project-specific enforcement tooling or single agent platform.
Terminology: goal and intent are both valid. Use goal when emphasizing the desired outcome and verification. Use intent when emphasizing the human meaning, motivation, or decision behind that outcome.
Human decisions required or BLOCKED instead.Hooks, isolated workspaces, CI checks, and other enforcement layers can strengthen the philosophy, but they are not the philosophy itself. In a Codex or Claude Code skill, keep the invariants as behavior, evidence, and reporting even when enforcement is unavailable.
Use this skill with:
$openplan-auto for orchestrating automatic/YOLO workflows.$openplan-operate for session initialization, behavior constraints, and subagent delegation.$openplan-align for ambiguity and requirement shaping.$openplan-research for bounded evidence gathering before design or execution.$openplan-docs-init for governed documentation generation setup.$openplan-test for proportional test evidence and regression proof.$openplan-review for YOLO/auto-mode review.$openplan-handoff for cross-agent or cross-session snapshots.$openplan-html-brief for temporary human-facing HTML summaries.$openplan-record for maintaining memory and documentation as human goal/intent records.$openplan-garden for semantic document gardening and goal/intent drift checks.When another OpenPlan skill conflicts with this one, follow this skill first and report the conflict.
Read references/principles.md when you need the full checklist.
For Claude Code, use assets/claude-code-command.md as a slash command or prompt seed.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.