adversarial-plan-review-codex
Skill27 starsChanged 3 months agoMITView on GitHub
Use when a plan needs hostile review before execution, especially high-risk coding, business deliverables, migrations, no-git changes, weak validation, stale assumptions, rollback gaps, or plans that must be safe for another agent to execute.
In this repository16 other files it gives its agents.
- canvas-design-codexSkill
- code-intelligenceSkill
- code-mapper-skillSkill
- deep-planning-codexSkill
- document-handoffSkill
- docx-winSkill
- frontend-design-codexSkill
- grill-me-codexSkill
- grill-with-docs-codexSkill
- handoff-codexSkill
- pptx-winSkill
- repo-map-codexSkill
- ultraplan-codexSkill
- verification-plan-codexSkill
- web-artifacts-builder-codexSkill
- xlsx-winSkill
The file
We split this skill into the rules it gives an agent
7 rules. About 0 are common, 7 are distinctive, and 0 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈7
Distinctive · estimate
This author's own choices. Worth a look.
0
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 14
Read the plan, success criteria, failure criteria, out-of-scope boundaries, repo map, evidence catalog, assumption ledger, dead ends, …
- Distinctive: line 16
Check whether every plan step is evidence-backed, ordered safely, and verifiable.
- Distinctive: line 18
If blockers exist, revise the source plan or tell the user exactly what decision/evidence is missing.
- Distinctive: line 23
Treat the current proposed plan and inspected evidence as the source inputs.
- Distinctive: line 25
Do not add a second approval gate.
- Distinctive: line 26
Do not write files while the current collaboration mode prohibits mutations.
- Distinctive: line 45
no blocked stakeholder, data, security, or permission issue remains.
≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Codex Adversarial Plan Review
Overview
Red-team a plan before execution. The goal is to find blocking flaws while changes are still cheap: stale paths, unsupported assumptions, missing validation, rollback gaps, stakeholder gaps, and contradictions with prior evidence.
Workflow
- Read the plan, success criteria, failure criteria, out-of-scope boundaries, repo map, evidence catalog, assumption ledger, dead ends, probes, and verification plan.
- Select review lenses: software, business, or mixed.
- Check whether every plan step is evidence-backed, ordered safely, and verifiable.
- Classify findings as
BLOCKING,IMPORTANT, orNOTE. - If blockers exist, revise the source plan or tell the user exactly what decision/evidence is missing.
- Return the review in conversation. Write a review artifact only when the user explicitly requests one, and place it in the active session folder or another user-approved destination.
Native Plan Mode
- Treat the current proposed plan and inspected evidence as the source inputs; do not require a repository planning workfolder.
- Return
PASSonly when there are noBLOCKINGfindings. UseFAILwhen inspected evidence proves a blocking flaw. UsePARTIALwhen required evidence cannot be inspected well enough to determine whether the plan is safe. - Do not add a second approval gate. Report the verdict and required corrections so the active Plan Mode can incorporate them.
- Do not write files while the current collaboration mode prohibits mutations.
References
Read as needed:
references/software-review.mdfor code, tests, migrations, dependencies, and rollback.references/business-review.mdfor stakeholders, source data, approval, privacy, and deliverable risks.references/mixed-review.mdfor combined business and coding work.
PASS Criteria
Return PASS only when:
- critical paths and source materials exist;
- assumptions are either verified or explicitly accepted risks;
- validation proves the stated success criteria;
- rollback or recovery is defined;
- sequencing does not depend on impossible or circular steps;
- no blocked stakeholder, data, security, or permission issue remains.
Output Format
Use this structure:
# Adversarial Plan Review
## Verdict
PASS | FAIL | PARTIAL
## Findings
- **Severity**: BLOCKING | IMPORTANT | NOTE
- **Issue**: ...
- **Evidence**: ...
- **Required fix**: ...
## Re-review
[What changed, or why no re-review was needed]Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

