writing-plans — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited writing-plans (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 2 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
→ Have an existing parent plan/spec and a tiny execution slice? → Use Planless Slice Lane.
→ Have approved spec/requirements for a new workstream or an escalation trigger? → Write implementation plan. Assume engineer has zero context.
→ Plan must answer: problem, baseline, files, compat, verification, risks, retirement. → Escalate from Planless Slice Lane to a durable plan when the slice adds a new owner, contract, schema, public API, architecture boundary, migration, persistence, security/permission, distribution/release surface, or unclear verification boundary.
Write comprehensive implementation plans assuming the engineer has zero context for our codebase and questionable taste. Document everything they need to know: which files to touch for each task, code, testing, docs they might need to check, how to test it. Give them the whole plan as bite-sized tasks. DRY. YAGNI. TDD. Frequent commits.
Assume they are a skilled developer, but know almost nothing about our toolset or problem domain. Assume they don't know good test design very well.
This skill is the canonical planning workflow for multi-step implementation work. Use it to convert approved specs or requirements into plans that are executable, testable, impact-aware, and bounded by compatibility and authority constraints.
Announce at start: "I'm using the writing-plans skill to create the implementation plan."
Context: This should be run in a dedicated worktree (created by brainstorming skill).
Input: approved requirements, a Spec Brief, or a Design Spec.
Save plans to: docs/aegis/plans/YYYY-MM-DD-<feature-name>.md Plan always goes to plans/ — never to work/. (User preferences for plan location override this default.)
Exception: if an existing parent plan/spec already owns the current tiny execution slice, use Planless Slice Lane. Do not save a new plan. Emit a compact Slice Card in the conversation or the active long-task checkpoint instead:
Slice Card:
- Goal:
- Parent plan/spec:
- Files:
- Boundary:
- Verification:
- Stop:If docs/aegis/ does not exist and configured Aegis workspace support is available, initialize the target project first:
python <aegis-workspace-helper> init --root <target-project-root>If installed Aegis workspace support is unavailable, initialize the workspace manually:
docs/aegis/README.md and docs/aegis/INDEX.mddocs/aegis/BASELINE-GOVERNANCE.md from templatedocs/aegis/baseline/YYYY-MM-DD-initial-baseline.mdThen save the plan and append to docs/aegis/INDEX.md. Prefer:
python <aegis-workspace-helper> append-index --root <target-project-root> --path docs/aegis/plans/<filename>.md --kind plan --title "<title>"
python <aegis-workspace-helper> check --root <target-project-root>If the input is a Spec Brief, keep the plan scoped to the pinned what/why/acceptance and do not expand into a formal design unless new architecture, contract, migration, or cross-module uncertainty appears.
Compact output contract before writing the plan: Plan Basis, BaselineUsageDraft, Requirement Ready Check, Files, Compatibility, Existence Check, Architecture Integrity Lens, Plan Pressure Test, Plan-Time Complexity Check, Tasks, Risks, and Retirement. Expand only where the approved scope, risk, or verification surface requires it.
Use a compact BaselineUsageDraft whenever the plan depends on specific baseline docs or current-authority refs:
BaselineUsageDraft:
- Required baseline refs:
- Delivered context refs:
- Acknowledged before plan refs:
- Cited in plan refs:
- Missing refs:
- Decision: continue | needs-baseline-readback | needs-verification | pause-for-user | blockedDelivered context refs is optional host-projected bookkeeping only. It is not authoritative proof that a host injected or the model internally consumed a context payload. The artifact exists to make baseline/context attention drift visible before and during planning.
Use a compact Requirement Ready Check before task decomposition unless the input is already an approved plan/spec whose acceptance boundary is explicit:
Requirement Ready Check:
- Requirement source refs:
- Goals and scope refs:
- User / scenario refs:
- Requirement item refs:
- Acceptance / verification criteria refs:
- Open blocker questions:
- Decision: ready | needs-source | needs-goal-alignment | needs-scenario | needs-acceptance-criteria | needs-clarification | needs-user-decision | blockedIf the decision is not ready, do not create implementation tasks. Return to the requirement/spec owner with the smallest missing evidence or decision. A task intent, conversation, or agent inference can be cited as a candidate source, but it is not durable requirement authority by itself.
Use a compact Existence Check before task decomposition when a plan would add a new owner, skill, artifact, host adapter, fallback, compatibility path, workflow step, or benchmark metric. Use docs/current/AEGIS_MINIMALITY_REFERENCE.md as the reference and keep the check advisory. Do not force it onto plans that only reuse existing owners and surfaces.
Existence Check:
- Proposed new surface:
- Existing owner / reuse candidate:
- Why existing surface is insufficient:
- Creation proof:
- Entropy / retirement impact:
- Decision: reuse-existing | add-with-proof | defer | reject | needs-first-principles-reviewIf the decision is reuse-existing, write tasks against the existing owner instead of creating a new surface. If the decision is add-with-proof, carry the proof, verification signal, and any retirement trigger into the relevant task.
Use the Architecture Integrity Lens before task decomposition when an executable plan may still encode responsibility overlap, a wrong canonical owner, a caller-side fallback, a stale path carrying real logic, or a missed higher-level owner / contract / source-of-truth simplification. Keep it compact: invariant, canonical owner / contract, responsibility overlap, higher-level simplification, retirement / falsifier, and verdict.
Use a compact Plan Pressure Test before task decomposition:
Plan Pressure Test:
- Owner / contract / retirement:
- Architecture integrity / higher-level path:
- Verification scope:
- Task executability:
- Pressure result: proceed | revise plan | return to designThe pressure test is not an approval gate and should not redesign an approved spec without cause. It exists to catch owner / contract / retirement risk, missing verification, and tasks that are too vague to execute safely.
Use a compact Plan-Time Complexity Check before writing task steps when the plan changes maintained source files, core owners, handlers, routers, managers, shared utilities, adapters, or fallback paths:
Use using-aegis/references/complexity-governance.md for the shared artifact classes, pressure signals, and over-budget handling rules.
Complexity Budget:
- Artifact class:
- Target files / artifacts:
- Current pressure:
- Projected post-change pressure:
- Budget result: within-budget | at-risk | over-budget
- Planned governance:
Plan-Time Complexity Check:
- Target files:
- Existing size / shape signals:
- Owner fit:
- Add-in-place risk:
- Better file boundary:
- Recommendation: edit-in-place | extract helper | add owner file | split task | defer refactorIf the projected budget result is over-budget, do not write an atomic task that silently assumes add-in-place growth. Revise the task boundary, add governance work, or explicitly mark the slice as requiring follow-up before implementation begins.
If the spec covers multiple independent subsystems, suggest breaking into separate plans. Before writing tasks, check: fact/assumption/unknown, baseline docs, compatibility boundary, whether dual-track (repair + retirement) applies. If approved requirements or the design carried an ADR signal, preserve the ADR signal, source refs, real alternatives, compatibility boundary, and expected baseline-sync questions for completion so ADR Auto Backfill can run without rediscovering the decision from scratch.
If task decomposition would encode a new owner, duplicate owner, fallback, adapter, compat-only carrier, delete-first question, unverified assumption, or long-term stability claim that the spec did not already settle, use Existence Check first. If the new surface is still justified but the owner, contract, or retirement decision remains risky, use first-principles-review and its Decision Hygiene Review or Architecture Integrity Lens before task decomposition.
When the plan must decide between deleting old internal paths, retaining compat for a proven external boundary, or stopping for persistent-state confirmation, compose anti-entropy-governance. Keep it as a narrow classification and guardrail owner; it does not authorize destructive execution.
Use Planless Slice Lane before writing or saving a plan when all of these are true:
parent
persistence, security/permission, distribution/release surface, or unclear verification boundary appears
Slice CardThe lane preserves long-task continuity without turning execution bookkeeping into durable planning artifacts.
Workspace creation is triggered by the plan save step. See using-aegis/SKILL.md Rule 3 for the hard binary rule. If the project already has docs/adr/ or architecture docs, reference them — do not duplicate authority.
Map files before defining tasks. Design units with clear boundaries and single responsibilities. Files that change together should live together. Follow existing codebase patterns. Each task should produce self-contained, independently reviewable changes.
Before you leave this workflow, the written plan must make these items answerable:
scenario, acceptance, clarification, or user decision is still missing**
existing owner**
contract path before task decomposition**
Each step is one action (2-5 minutes):
Every plan MUST start with: Goal, Architecture, Tech Stack, Baseline/Authority Refs, Compatibility Boundary, Verification. See template in this directory.
Each task: Files (create/modify/test paths), Why (user/business value), Impact/Compatibility, Verification (exact commands), then 5 checkbox steps: Write test → Verify RED → Minimal code → Verify GREEN → Commit. Every step must include complete code and exact commands.
For bug fixes, refactors, contract changes, or governance cleanup, add Repair Track (root cause, canonical owner, minimal sufficient stable repair, compat boundary, verification) and Retirement Track (old owner/fallback, active status, keep reason or deletion trigger) inside the relevant task. If Ripple Signal Triage fired, include the affected downstream consumers and expanded verification path in the same task.
Never write: "TBD", "TODO", "implement later", "fill in details", "Add appropriate error handling", "Write tests for the above" without actual test code, "Similar to Task N" without repeating code. Every step must contain complete, copy-paste-ready content.
Check plan against spec: 1) Spec coverage — can you point to a task for each requirement? 2) Placeholder scan — any TBD/TODO/vague instructions? 3) Type consistency — do signatures match across tasks? 4) Compatibility — invariants, non-goals, stable interfaces marked? 5) Existence check — any new owner, artifact, adapter, fallback, workflow step, or benchmark metric has proof and a reuse decision? 6) Plan-time complexity and minimality — lowest-entropy owner/file boundary that fixes the bug class, not just the smallest textual diff? 7) Architecture integrity — any higher-level owner / contract / source-of-truth simplification skipped? 8) Verification — exact commands? 9) Dual-track, decision hygiene, and ADR/baseline-sync signals preserved where needed?
Fix issues inline. Re-review is not needed — just fix and move on.
After saving the plan, offer execution choice:
"Plan complete and saved to `docs/aegis/plans/<filename>.md`. Two execution options:
1. Subagent-Driven (recommended) - I dispatch a fresh subagent per task, review between tasks, fast iteration
2. Inline Execution - Execute tasks in this session using executing-plans, batch execution with checkpoints
Which approach?"
If Subagent-Driven chosen:
If Inline Execution chosen:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.