plan-change
Skill3 starsChanged 20 days agoMITView on GitHub
Plan a software change or revise an existing plan. Define acceptance criteria, authorized scope, coherent slices, and verification needs. Use for planning requests; planning alone does not start implementation.
11 other projects use a version of this.
Adopted by
Most recently taken up by
- Apicurio/apicurio-registrytheir own version, first seen Nov 9, 2026
- 0xdeafcafe/skillstheir own version, first seen Nov 6, 2026
- CsHeng/agent-skillstheir own version, first seen Nov 4, 2026
- aantoniadis/skillstheir own version, first seen Oct 20, 2026
- matheusPavaneli/workbenchtheir own version, first seen Oct 20, 2026
- Ionate-Technologies/indium-agentkittheir own version, first seen Oct 20, 2026
Used with
Projects with it also use security-review.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
SentrySkillsecurity-review
Finds exploitable application security vulnerabilities in code changes. Use for Warden security scans, appsec review, OWASP-style checks, authentication or authorization bugs, injection, XSS, SSRF, path traversal, secrets, unsafe crypto, webhook verification, open redirects, or sensitive data exposure.
Also in 3 projects that use this
Other versions11 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 11
- Apicurio/apicurio-registry★ 951same name
- Indium-AI-Labs/indium-agentkit★ 18same name
- Ionate-Technologies/indium-agentkit★ 17same name
- CsHeng/agent-skills★ 3same name
- contextosai/skills★ 1same name
- hamburger-os/PraxFlow★ 1same name
- matheusPavaneli/workbench★ 1same name
- 0xdeafcafe/skills★ 0same name
- aantoniadis/skills★ 0same name
- BanKnight/claude-template★ 0same name
1 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
In this repository8 other files it gives its agents.
- deliver-changeSkill
- implement-changeSkill
- publish-changeSkill
- remediate-findingsSkill
- review-changeSkill
- review-prSkill
- setup-projectSkill
- verify-changeSkill
The file
We split this skill into the rules it gives an agent
5 rules. 0 are common, 5 are distinctive, and 0 are very specific to this project.
0
Common
Most of the 10 edited versions we read keep these.
5
Distinctive
This author's own choices. Worth a look.
0
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Distinctive: line 30
Read executable check configuration.
- Distinctive: line 69
Checkpoint 4: every criterion has a verification route or a gap.
- Distinctive: line 75
Use the project's plan format and authorized destination, else return the draft in the response.
- Distinctive: line 77
Every plan, however small, includes:
- Distinctive: line 88
Keep prose short without dropping an item.
“Common” is measured: kept by at least 6 in 10 of the 10 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Plan change
Produce a plan grounded in the project's requirements and current code. Reuse accepted decisions and valid plans; keep detail proportional to the change. First read the contract core and the verification rules.
1. Scope and ownership
- Identify the requested outcome, planning authority, exclusions, and the owner of the requirements and plan. Separate desired behavior from observations and assumptions.
- An accepted plan covers the request → revalidate affected inputs and propose only necessary amendments.
- List questions that could change the plan. Answer observable ones by inspection; ask for missing intent and material decisions.
Checkpoint 1: the requirements source and scope are clear.
2. Inspect the affected behavior
- Trace entrypoints, callers, data, contracts, tests, and docs, including the boundaries and recovery behavior the change touches. For an uncertain interface, sketch its caller's use before choosing its shape.
- Read executable check configuration. Consult current primary documentation with the project's tools when dependency facts matter.
- Bug → gather existing original-failure evidence or name the smallest safe reproduction. Read-only checks may run when permitted. Repro files, dependency provisioning, or application edits need their own authority; propose them.
Checkpoint 2: the plan cites inspected code and test locations, separates observations from hypotheses, and states what inspection could not establish.
3. Acceptance and decisions
- Draft observable acceptance criteria and exclusions for the owner, reusing existing criterion IDs. Give each expected result its independent basis.
- Choose an approach with the reuse-first ladder.
- Material product or architecture decision → present alternatives, tradeoffs, and a recommendation to the authorized decision maker. Routine authorized choices proceed.
Checkpoint 3: each criterion is observable, and each material decision is accepted or explicitly pending. A pending decision blocks readiness.
4. Slices and verification
- Per slice: affected areas, prerequisites, expected result, tests, and required docs. A small change is one slice. Add migration, compatibility, rollout, recovery, or external-dependency work only where needed.
- Per material risk: the assumption and a disproving check. Separate existing proof from planned verification.
- Per criterion: checks under the verification rules (existing case IDs, new coverage, original-failure evidence, defect detection). For application runs, name the real interface, readiness and isolation needs, side effects, and evidence-preserving cleanup. Point to project procedures instead of copying commands.
- Name missing test infrastructure or test-ID mechanisms and propose bounded work; planning installs nothing.
- Name independent-review needs and specialist triggers, and for each unavailable check, tool, or environment, what would resolve it. A planned check is not a passed check.
Checkpoint 4: every criterion has a verification route or a gap. Every slice has an observable end condition, and every material risk an assumption and a check. Dependencies and blockers are stated.
5. Return the plan and stop
Use the project's plan format and authorized destination, else return the draft in the response. Reference existing authorities instead of copying requirements. Every plan, however small, includes:
- Outcome, scope, and exclusions
- Acceptance criteria, by ID or source when they exist
- Inspected evidence and open questions
- Decisions, accepted or pending
- Slices with tests and docs
- Criterion-to-check map
- Review needs, blockers, and next action
- Readiness: ready within authorized scope, pending decision, or blocked, with the reason
Keep prose short without dropping an item. A ready plan grants no implementation permission. A standalone planning request stops here.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

