agentleFS
dachentdachent/skills/adversarial-plan-review-codex/SKILL.md

adversarial-plan-review-codex

Skill27 starsChanged 3 months agoMITView on GitHub

Use when a plan needs hostile review before execution, especially high-risk coding, business deliverables, migrations, no-git changes, weak validation, stale assumptions, rollback gaps, or plans that must be safe for another agent to execute.

The file

We split this skill into the rules it gives an agent

7 rules. About 0 are common, 7 are distinctive, and 0 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈7

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 0

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Distinctive:

    Read the plan, success criteria, failure criteria, out-of-scope boundaries, repo map, evidence catalog, assumption ledger, dead ends, …

    line 14
  2. Distinctive:

    Check whether every plan step is evidence-backed, ordered safely, and verifiable.

    line 16
  3. Distinctive:

    If blockers exist, revise the source plan or tell the user exactly what decision/evidence is missing.

    line 18
  4. Distinctive:

    Treat the current proposed plan and inspected evidence as the source inputs.

    line 23
  5. Distinctive:

    Do not add a second approval gate.

    line 25
  6. Distinctive:

    Do not write files while the current collaboration mode prohibits mutations.

    line 26
  7. Distinctive:

    no blocked stakeholder, data, security, or permission issue remains.

    line 45

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

Codex Adversarial Plan Review

Overview

Red-team a plan before execution. The goal is to find blocking flaws while changes are still cheap: stale paths, unsupported assumptions, missing validation, rollback gaps, stakeholder gaps, and contradictions with prior evidence.

Workflow

  1. Read the plan, success criteria, failure criteria, out-of-scope boundaries, repo map, evidence catalog, assumption ledger, dead ends, probes, and verification plan.
  2. Select review lenses: software, business, or mixed.
  3. Check whether every plan step is evidence-backed, ordered safely, and verifiable.
  4. Classify findings as BLOCKING, IMPORTANT, or NOTE.
  5. If blockers exist, revise the source plan or tell the user exactly what decision/evidence is missing.
  6. Return the review in conversation. Write a review artifact only when the user explicitly requests one, and place it in the active session folder or another user-approved destination.

Native Plan Mode

  • Treat the current proposed plan and inspected evidence as the source inputs; do not require a repository planning workfolder.
  • Return PASS only when there are no BLOCKING findings. Use FAIL when inspected evidence proves a blocking flaw. Use PARTIAL when required evidence cannot be inspected well enough to determine whether the plan is safe.
  • Do not add a second approval gate. Report the verdict and required corrections so the active Plan Mode can incorporate them.
  • Do not write files while the current collaboration mode prohibits mutations.

References

Read as needed:

  • references/software-review.md for code, tests, migrations, dependencies, and rollback.
  • references/business-review.md for stakeholders, source data, approval, privacy, and deliverable risks.
  • references/mixed-review.md for combined business and coding work.

PASS Criteria

Return PASS only when:

  • critical paths and source materials exist;
  • assumptions are either verified or explicitly accepted risks;
  • validation proves the stated success criteria;
  • rollback or recovery is defined;
  • sequencing does not depend on impossible or circular steps;
  • no blocked stakeholder, data, security, or permission issue remains.

Output Format

Use this structure:

# Adversarial Plan Review

## Verdict
PASS | FAIL | PARTIAL

## Findings
- **Severity**: BLOCKING | IMPORTANT | NOTE
- **Issue**: ...
- **Evidence**: ...
- **Required fix**: ...

## Re-review
[What changed, or why no re-review was needed]

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.