agent-plans — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-plans (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A FIFO plan queue system where humans write instructions and agents plan, execute, and report back — one task at a time.
pending → (agent adds ## Task) → review → (human approves) → approved → (agent executes) → completedHumans write ## Instructions. Agents write ## Task and ## Execution. Humans stay in control at every handoff.
Run the helper script (path relative to the skill root):
node scripts/plan.js next
# Custom directory:
node scripts/plan.js next --dir path/to/plansThe script returns JSON. Parse the action field to know what to do:
action | Meaning |
|---|---|
"execute" | An approved plan is ready — go work on it |
"plan" | A pending plan needs a ## Task written |
"none" | Nothing to do — tell the user |
The script also returns filePath — the absolute path to the target file. Always use it.
"execute" (approved plan)filePath## Task section carefully — this is what you must dostatus: approved → status: completed in the YAML frontmatter## Execution section at the end, summarizing what you did (be brief and precise — this is for the human's log)Execution summary format (keep it short):
## Execution
Brief description of what was done. List key files created/modified if relevant."plan" (pending plan)filePath## Instructions section — understand what the human wantsstatus: pending → status: review in the YAML frontmatter## Task section describing what you plan to do (brief, precise, actionable)Task format (keep it short — this is your plan, not the execution):
## Task
Brief description of the approach. What will be created, changed, or implemented. No fluff.approved when they're happy with it."none"Tell the user there are no approved or pending plans to work on. Suggest running:
node scripts/plan.js status...so they can see the current state of all plans.
---
name: short-kebab-name
description: One-line summary of what this plan achieves
status: pending | review | approved | completed
---
# Optional long title
Optional summary paragraph.
## Instructions
What the human wants done. Written by the human.
## Task
What the agent plans to do. Written by the agent when status moves pending → review.
## Execution
What the agent did. Written by the agent when status moves approved → completed.File naming convention: NNNN-short-description.md — e.g. 0001-create-auth-endpoints.md. The numeric prefix determines FIFO order. Always create new plans with the next available number.
node scripts/plan.js status
node scripts/plan.js status --dir path/to/plansThis prints a human-friendly summary of all plans with their current status.
approved before pending — always finish approved work before planning new tasksplan.js next first; don't guess which file to work onstatus: line, leave everything else untouched~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.