address-plan-findings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited address-plan-findings (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A reviewer (often the /implementation-plan-review skill, or the user) hands you a list of findings about an implementation plan — each a claimed gap, inaccuracy, or risk in the plan, usually with a severity, a location, a problem, and a recommendation. Your job is to judge each finding on its merits, then edit the plan to fix the ones that are genuinely valid, and leave a written record of your decisions.
Two things make this skill what it is, and you must hold both:
$1, optional override): you rarely pass this — it's normally inferred in step 0.You need the plan-id so you can find the plan file (.ai/impl_plans/<plan-id>.md) and its feedback directory. This skill is normally run in the same session that just produced the plan (e.g. right after /plan-export), so you won't be handed the path — infer it. If a plan-id was passed explicitly as $1, that wins; otherwise:
.ai/impl_plans/issue-418.md or .ai/impl_plans/issue-418-scratchpads/… — the issue-418 segment is the plan-id. This is the strongest signal and it's right there in the invocation..ai/impl_plans/<id>.md that /plan-export wrote) and take the id from its filename.Confirm the plan file exists before going further.
Run the bundled reset script with the resolved plan-id:
bash .agents/skills/address-plan-findings/scripts/reset_findings_feedback.sh <plan-id>It wipes and recreates <repo>/.ai/impl_plans/<plan-id>-findings-feedback/ so this run's feedback file can never be confused with a stale one from a previous round, and prints the absolute path of the now-empty directory — that's where your feedback file goes in step 6. The script resolves the project root itself (git rev-parse --show-toplevel), so it targets the correct .ai/impl_plans whether you're in the principal checkout or a git worktree, regardless of your current directory. If it exits non-zero (bad plan-id, plan file missing, or not inside a git repo) it tells you why; fix the cause and re-run rather than working around it.
/plan-export baked in).…-scratchpads/finding-NN-*.md), read it — it usually carries the reviewer's grounded analysis (the variants weighed, the evidence, the recommendation) and is the fastest way to see what they actually checked..ai/impl_plans/. They're irrelevant to this one and only burn context and bias your judgment toward another feature's choices.Treat each finding as a claim to confirm or refute against the real codebase and the repo's own rules — exactly the critical posture of /review-described-changes, but pointed at the plan:
.cursor/rules/*.mdc the finding names. Reason from what the code and rules say today, not from the finding's paraphrase of them.Edit only the plan file to address every valid (or partially-valid) finding:
Plans produced by /plan-export wrap every section in <!-- impl-plan:begin slug="…" --> markers that scripts/slice_impl_plan.py must be able to slice. If the plan has these markers, re-run the validator after your edits and fix until it exits 0 — a plan that no longer slices cannot be implemented:
uv run python scripts/slice_impl_plan.py .ai/impl_plans/<plan-id>.md --inspectpython scripts/slice_impl_plan.py .ai/impl_plans/<plan-id>.md --inspectWrite one Markdown file into the directory from step 1: .ai/impl_plans/<plan-id>-findings-feedback/feedback.md. It has exactly two sections, and the asymmetry between them is deliberate:
Key each bullet to the finding's number/title from the input so the mapping is unambiguous. If a section has no entries, write a single bullet saying so explicitly (- None — every finding was valid and addressed. / - None — no finding was valid.) rather than leaving it blank.
Use this structure:
# Findings feedback — <plan-id>
## What was changed
- **Finding 1 — <short title>:** <concise note on the edit that closed it>
- **Finding 2 — <short title>:** <concise note on the edit that closed it>
## Not closed
- **Finding 3 — <short title>:** <thorough plain-language explanation of why no change was warranted — what you checked and what it actually showed>Your entire chat reply is the path to the feedback file, as a clickable link:
[.ai/impl_plans/<plan-id>-findings-feedback/feedback.md](.ai/impl_plans/<plan-id>-findings-feedback/feedback.md)Do not restate what you changed or why you rejected anything in chat — all of that lives in the file, and repeating it defeats the point of writing the file. The path is the whole message.
.md and the feedback file (plus the directory reset in step 1). No source/test/doc edits — that's implementation, not this skill.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.