📦

alan-plan

Name: alan-plan
Author: supatest-ai

v1.0.1 مراجعة المحتوى r1 مخاطر متوسطة ⚙️ الأوامر الخارجية

Create Actionable Implementation Plans in Alan

Complex software changes need plans grounded in the existing codebase. This skill clarifies requirements, drafts visual plans, and stores versioned artifacts in Alan.

يدعم: Claude Codex Code(CC)

📊 72 كافٍ

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "alan-plan" from https://skillstore.io/skills/supatest-ai-alan-plan.md and its manifest at https://skillstore.io/api/skills/supatest-ai-alan-plan/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/supatest-ai-alan-plan.md manifest موقَّع GET /api/skills/supatest-ai-alan-plan/manifest lockfile موقَّع GET /api/skills/supatest-ai-alan-plan/lockfile

اختبرها

جارٍ استخدام "alan-plan". Plan adding organization-level audit logs to the existing application.

النتيجة المتوقعة:

A phased plan covering event capture, storage schema, authorization, retention, query APIs, interface changes, tests, rollout, and a data-flow diagram.

جارٍ استخدام "alan-plan". Revise the authentication migration plan after feedback about rollback safety.

النتيجة المتوقعة:

A linked revision that reassesses affected code, adds compatibility stages, defines rollback checkpoints, and addresses each feedback point.

التدقيق الأمني

مخاطر متوسطة

v1 • ٢٠‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

All 29 static findings are false positives caused by Markdown backticks, fenced examples, Mermaid labels, and ordinary prose. No shell execution, system reconnaissance, or prompt injection appears in SKILL.md. The remaining medium risk is intended external persistence of repository-derived plans and context identifiers to Alan.

الملفات التي تم فحصها

159

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

متوسط

SKILL.md:16-18 SKILL.md:53-54 SKILL.md:81-100

Repository context is persisted to an external service

The skill requires sending the full repository-derived plan plus task, conversation, and team identifiers to Alan before user approval. Plans may expose sensitive architecture or internal names.

The instructions explicitly require codebase analysis and persistence of the complete plan with context identifiers through the Alan MCP tool.

عوامل الخطر

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/supatest-ai-alan-plan/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/supatest-ai-alan-plan/security.svg)](https://skillstore.io/skills/supatest-ai-alan-plan?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/supatest-ai-alan-plan?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supatest-ai-alan-plan/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/supatest-ai-alan-plan.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

supatest-ai. (2026). alan-plan security audit report (audit version 1) [Author version 1.0.1]. Skillstore. https://skillstore.io/skills/supatest-ai-alan-plan/audits/1

اقتباس BibTeX

@techreport{supatest-ai-supatest-ai-alan-plan-2026,
  author = {supatest-ai},
  title = {alan-plan security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/supatest-ai-alan-plan/audits/1},
  note = {Author version 1.0.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "alan-plan security audit report (audit version 1)"
version: "1.0.1"
type: report
authors:
  - name: "supatest-ai"
date-released: "2026-08-20"
url: "https://skillstore.io/skills/supatest-ai-alan-plan/audits/1"
identifiers:
  - type: other
    value: "skillstore:supatest-ai-alan-plan:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

100

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Plan a new product feature

Map affected modules, dependencies, risks, and validation work before implementation begins.

Review an architecture change

Compare technical approaches and visualize service, schema, state, or data-flow changes.

Revise a plan from feedback

Recheck assumptions, address review comments, and create a linked plan revision in Alan.

جرّب هذه الموجّهات

Create a basic plan

Create an implementation plan for [task]. Explore the repository without modifying files. Ask one question if a requirement is unclear.

Plan a cross-module feature

Plan [feature] for this codebase. Identify affected files, dependencies, risks, and validation steps. Add a Mermaid diagram when relationships are complex.

Revise an existing Alan plan

Review Alan plan [artifact reference] against this feedback: [feedback]. Recheck relevant code, resolve ambiguities, and create a versioned revision.

Design a phased migration

Design a phased migration from [current state] to [target state]. Compare alternatives, map system changes, sequence dependencies, and document rollback decisions.

أفضل الممارسات

Provide the task goal, constraints, and relevant Alan artifact references.
Answer clarification questions before requesting the final plan.
Review plan content for secrets and sensitive architecture before external persistence.

تجنب

Do not request implementation or source-file changes from this planning skill.
Do not provide unrelated artifact identifiers or substitute one Alan context identifier for another.
Do not force diagrams for trivial changes with no meaningful relationships.

الأسئلة المتكررة

Does this skill change source files?

No. It reads repository context and creates an implementation plan without modifying source files.

Which Alan tools are required?

Plan creation requires the Alan create-plan MCP tool. Revisions may also use artifact retrieval and related artifact tools.

How does the skill handle unclear requirements?

It asks one focused question at a time until the plan has enough confirmed context.

Can it revise an existing plan?

Yes. It retrieves the previous artifact, addresses feedback, increments the title version, and links the revision to its parent.

When does it add Mermaid diagrams?

It adds diagrams for complex relationships, service interactions, schemas, process flows, states, architecture, or data movement.

What information is sent to Alan?

The plan content and task, conversation, and team identifiers are sent when the plan artifact is created.

تفاصيل المطور

المؤلف

supatest-ai

الترخيص

MIT

إصدار المؤلف

v1.0.1

مراجعة Skillstore

المستودع

https://github.com/supatest-ai/alan-skills/tree/e6ebae2c86d4d3ad8597e588f3e820ab0c90658f/skills/alan-plan

مرجع

bdb71a4bc34515f37772ae85fd5501f9c2ff33b0

حداثة الصيانة

٢٠‏/٨‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📄 SKILL.md