hyper-plan-review — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hyper-plan-review (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Plan review gate. Locates a plan file, sends it to Codex for critique, saves the review to .hyperclaude/plan-reviews/<timestamp>-<slug>.md, and you read the review and refine the plan.
/hyperclaude:hyper-plan-review (with or without an argument).Invocation argument: $ARGUMENTS
--resume is supported. Paths with spaces are unsupported.
Apply this regex to the trimmed $ARGUMENTS:
^(?:((?!--)\S+))?(?:\s*(--resume)(?:\s+(\S+))?)?\s*$--resume as a path)"--resume" token (truthy when present, undefined when not)When Group 2 is '--resume' (truthy) and Group 3 is undefined, treat as --resume auto.
Valid invocations:
/hyperclaude:hyper-plan-review — auto-discovers most recent plan, fresh run/hyperclaude:hyper-plan-review path/to/plan.md — explicit plan path, fresh run/hyperclaude:hyper-plan-review --resume — auto-discovers plan, resumes from latest artifact (auto)/hyperclaude:hyper-plan-review --resume <prev-artifact-path> — resumes from explicit artifact/hyperclaude:hyper-plan-review path/to/plan.md --resume — explicit path, resume from auto/hyperclaude:hyper-plan-review path/to/plan.md --resume <prev-artifact-path> — explicit path, explicit artifactIf the argument doesn't match the regex, ask the user to clarify and stop.
--resume <path> (explicit): if validation fails, bridge returns ok:false, no fresh run, stderr note. Surface the error verbatim.--resume / --resume auto: if validation fails, bridge falls back to fresh run, writes artifact with codex-resume-status: fallback, stderr note.ok:false — NOT fallback. Tell user to narrow scope.In priority order:
ls -1t .hyperclaude/plans/*.md 2>/dev/null | head -1If that returns a path, use it.
.hyperclaude/plans/<slug>.md, or pass an explicit path: /hyperclaude:hyper-plan-review path/to/plan.md." Stop.node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-bridge.mjs" plan-review --plan-path "<resolved path>"If --resume was matched (Group 2 truthy), append --resume <value> to the argv passed to the bridge, where <value> is Group 3 if present, otherwise auto.
Use the Bash tool with timeout: 600000.
Parse the JSON. On success, read the review file with the Read tool. Integrate the review:
When you revise the plan, always overwrite the same plan file in place. Do not create -v2.md or sibling files: the review thread's --resume identity is keyed on the plan path, so a new path breaks resume continuity (the next critique loses its prior context). Tell the user the plan was updated in place.
Review files have frontmatter (mode: plan-review, task: plan path, slug, generated, plugin-version, codex-version, template-version, plan-path, plus codex-input-tokens, codex-cached-input-tokens, codex-output-tokens, codex-reasoning-output-tokens each emitted independently when Codex reported that token field in usage; omitted when Codex did not emit usage) followed by Issues / Improvements / Verdict sections.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.