brainstorm-and-plan — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited brainstorm-and-plan (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<HARD-GATE> Do NOT write any code, scaffold any project, or take any implementation action until you have presented a design and the user has approved it. This applies to EVERY project regardless of perceived simplicity. </HARD-GATE>
Every project goes through this process. A todo list, a single utility, a config change — all of them. "Simple" projects are where unexamined assumptions cause the most wasted work. The design can be short, but you MUST present it and get approval.
docs/specs/YYYY-MM-DD-<topic>-design.md and commitWrite plans assuming the engineer executing has zero codebase context and questionable taste. Document everything: files to touch, code, testing, how to verify. DRY. YAGNI. TDD. Frequent commits.
# [Feature Name] Implementation Plan
**Goal:** [One sentence]
**Architecture:** [2-3 sentences]
**Tech Stack:** [Key technologies]
---### Task N: [Component Name]
**Files:**
- Create: `exact/path/to/file.ts`
- Modify: `exact/path/to/existing.ts`
- Test: `tests/exact/path/to/test.ts`
- [ ] **Step 1: Write the failing test**
[actual test code]
- [ ] **Step 2: Run test to verify it fails**
Run: `npm test path/to/test.ts`
Expected: FAIL with "[specific message]"
- [ ] **Step 3: Write minimal implementation**
[actual implementation code]
- [ ] **Step 4: Run test to verify it passes**
Run: `npm test path/to/test.ts`
Expected: PASS
- [ ] **Step 5: Commit**
`git add ... && git commit -m "feat: add specific feature"`These are plan failures — never write them:
clearLayers() in Task 3 but clearFullLayers() in Task 7 is a bug.)Save plans to: docs/plans/YYYY-MM-DD-<feature-name>.md
After saving the plan, execute tasks sequentially:
/tdd skill for each implementation step/verify-done before marking anything completeFor feature work, create an isolated worktree:
# Check for existing .worktrees/ directory, create if needed
# Verify .worktrees/ is in .gitignore (add + commit if not)
git worktree add .worktrees/<branch-name> -b <branch-name>
cd .worktrees/<branch-name>
npm install # or appropriate setup
npm test # verify clean baselineWhen done: verify tests → merge/PR/keep/discard → clean up worktree.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.