update-plan — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited update-plan (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Process user responses in questions.md and update all related planning documents accordingly.
{repo root}/.ai/planning/ created by the planning or planning-mode skillsask) mode: the plan's questions.md must contain at least one question with a non-empty ### Response sectionask mode: the plan's questions.md must contain at least one unprocessed question (with or without a response)The skill takes a single optional argument:
ask (case-insensitive, trimmed) → enable ask mode and locate the plan via the Phase 1 strategies below (folder is not specified separately).ask is standalone — it cannot be combined with a folder name on the same invocation. If the user needs ask mode against a specific plan in a multi-plan repo, the Phase 1 multi-plan prompt will let them choose.
Throughout the rest of this skill, ask mode refers specifically to the case where the argument was ask.
Resolve the target plan using the first matching strategy:
planning-mode/planning skill invocation in this session. If found, use it directly and confirm with the user (e.g. "Updating plan 2026-03-24 auth refactor — correct?"). Proceed on confirmation; if the user says no, fall through to the next strategy.ask argument, resolve it as a folder name against folders inside {repo root}/.ai/planning/. (The ask keyword is a mode flag, not a folder name — see "Argument parsing" above.)planning-mode or planning skills.Read the following files from the selected plan folder (skip any that don't exist):
questions.mdplan.mdfindings.mdprogress.md (if present)If questions.md does not exist or contains no questions, tell the user there's nothing to process and stop.
Scan questions.md for unprocessed questions, in document order. A question is "processed" when a <!-- Processed --> comment appears directly below its response content; processed questions are always skipped.
What counts as "to handle" depends on the mode:
### Response section. If none exist, tell the user there is nothing to process and stop.Iterate the unprocessed questions identified in Phase 3 in document order. For each question, follow the branch that matches the current state.
### ResponseThis is the standard processing path (applies to both default mode and ask mode):
plan.md, findings.md, or progress.md need updatingplan.md: update phases, decisions, key questions, or scope as neededfindings.md: record new requirements, technical decisions, or constraints derived from the responseprogress.md: log a new entry noting the questions processing session<!-- Processed --> below the response in questions.md### Response, ask mode is ONPrompt the user interactively, then run Branch A:
## Q[N]: ... heading and the ### Response heading), excluding HTML comments (<!-- ... -->) which are author-notes from the template, not part of the question itself. Pass this prose to the user without rephrasing.AskUserQuestionaskQuestionsquestions.md under the existing ### Response heading (do not rephrase, do not editorialise). Then run Branch A for this question (process the answer and mark <!-- Processed -->).### Response empty, do not add <!-- Processed -->, and move on to the next question.### Response, ask mode is OFFSkip the question silently and move on. It remains unprocessed and will be reported in Phase 6 as still-unanswered.
plan.md; append or update, don't overwriteplan.md is permittedIf processing the responses raises new questions or ambiguities:
questions.md following the existing template format### Response section below each new questionIf no follow-up questions are needed, do not add any.
Provide a concise summary covering:
questions.md### Response is still empty (number and topic). This applies to all invocations of this skill, including default mode (where empty-response questions were skipped) and ask mode (where the user may have declined some questions). If every question has been answered or processed, omit this section.If no changes were needed and no new questions arose, say so clearly.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.