improve-a-plan — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited improve-a-plan (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Resolve the target plan using the first matching strategy:
planning-mode or planning skill invocation in this session. If found, use it directly and confirm with the user (e.g. "Improving plan 2026-03-24 auth refactor — correct?"). Proceed on confirmation; if the user says no, fall through to the next strategy.{repo root}/.ai/planning/ e.g. {repo root}/.ai/planning/2026-01-20 improve-mfa-flow/. Do not read the contents of any plan folders until the plan has been resolved.planning-mode or planning skill.1. Adversarial review in a fresh session
Start a new session and ask me to critique the plan with fresh eyes (no bias from having written it).
Something like: "Read the plan in <location of plan> and the findings. Identify assumptions, gaps, and areas likely to break during implementation." A separate session has clean context and is more likely to spot issues than the one that wrote the plan.
2. Dry-run in plan mode
Use Shift+Tab to switch to plan mode, then ask me to walk through the plan as if implementing it — reading the actual
source files, checking types exist, verifying method signatures match what the plan assumes. This surfaces mismatches
between the plan and reality (e.g. a method signature that's slightly different, a missing dependency, a type that
doesn't exist yet).
3. Explicit assumption check
Ask me to list every assumption the plan makes (e.g. about an external API) and verify each one against an actual
source. The findings doc has some of this, but after a lot of back and forth, it may be worth a refresh.findings.md and update or create, if it does not exists, questions.md with your findingsquestions.md should be your findings/concerns/challenges phrased as clarification or decision questions to the user~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.