openplan-docs-init — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openplan-docs-init (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this after $openplan-core and usually after $openplan-align when a project needs an initial governed documentation surface before agents start generating durable docs.
Document generation begins with authority and provenance, not with a pile of files. Generated docs must not present agent assumptions as human intent.
Use this skill when asked to:
Do not use it for ordinary documentation edits after the document structure already exists. Use $openplan-record and $openplan-garden for that.
.openplan/ when docs should live inside a code repo without mixing with product docs;docs/ or repo root when that is the project convention;$openplan-garden after broad generation and $openplan-record for durable memory/docs updates.$openplan-research first when the docs scaffold depends on facts not already backed by local durable context.The docs root is configurable. Do not assume OpenPlan docs must live at the project root.
Valid docs roots include:
.openplan/ inside a code repo;docs/ inside a project;All paths in the document map are relative to the selected docs root. For example, if the docs root is .openplan/, then design/ means .openplan/design/.
Use the user's explicit docs root when provided. If no docs root is provided, discover existing conventions before proposing one. Do not move or rewrite existing docs into a new root unless the human explicitly requests migration.
Use project conventions first. If no convention exists, start from this map and prune aggressively. Paths are relative to the selected docs root.
| Path | Purpose | Durable |
|---|---|---|
README.md or docs index | Entry point and navigation | yes |
design/ | Goal, principles, architecture, workflow | yes |
decisions/ | ADRs or decision records | yes |
planning/ | Roadmap, phases, open work | yes |
conventions/ | Naming, style, workflow rules | yes |
research/ | Evidence and investigations | medium-lived |
review/ | Review reports and findings | snapshot |
deviations/ | Accepted exceptions and rationale | durable until superseded |
_agent/state/needs-snapshot.md | Cross-session intent snapshot | short/medium-lived |
_templates/ | Reusable document shapes | yes |
For a code repo, keep implementation specs and task artifacts separate from upstream design authority. For a docs repo, keep implementation notes out unless they explain documentation infrastructure.
Assumption, Inference, or Pending confirmation.design/ changes are introduced in an ADR-governed project, create or request a matching decision record.Stop and ask/report when:
Only the active human-facing coordinator asks the human. A delegated agent reports Human decisions required or BLOCKED with the missing decision.
Docs init mode:
Target surface:
Docs root:
Authority sources:
Generated/proposed paths:
Assumptions:
Human decisions required:
Follow-up skills:
Residual risk:If editing is authorized, make the narrowest scaffold and report the changed paths.
references/doc-map.md: portable docs surface map.references/init-contract.md: initialization report and scaffold contract.assets/claude-code-command.md: Claude Code command/prompt seed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.