Skills plan-directory
📦
plan-directory
Content revision r1 Low Risk ⚙️ External commands📁 Filesystem access
Create Structured Plan Directories
Complex projects can lose context when plans live in loose notes. This skill creates a PLAN.md index and numbered task files with checklists.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "plan-directory" from https://skillstore.io/skills/diversioteam-plan-directory.md and its manifest at https://skillstore.io/api/skills/diversioteam-plan-directory/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "plan-directory". Create a plan for adding user authentication with JWT and password reset.
Expected outcome:
- A PLAN.md index with purpose, locked decisions, task links, and completion checks.
- Task files for user model, JWT setup, login endpoints, password reset, and integration tests.
- Each task includes dependencies, scope, checklist items, tests, and measurable completion criteria.
Using "plan-directory". Add OAuth support to the existing authentication plan.
Expected outcome:
- The existing PLAN.md is read before changes are made.
- A new numbered OAuth task is appended without renumbering earlier tasks.
- The task index is updated to link the new task and show its pending status.
Using "plan-directory". Mark the JWT setup task as complete.
Expected outcome:
- Checklist and completion items are checked in the matching task file.
- The corresponding PLAN.md task index entry is checked when all task items are complete.
- The response confirms which plan files were updated.
Security Audit
Low Riskv8 • 7/5/2026 Open versioned report
All 81 static findings were reviewed against SKILL.md. The backtick, path traversal, and reconnaissance alerts are false positives from Markdown examples, template paths, and test text. A low severity semantic issue remains because the front matter grants Bash even though the workflow only needs file and glob operations.
1
Files scanned
516
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
Low
Overbroad Bash Tool Permission
The skill front matter grants Bash access, but the documented workflow only needs to read, write, edit, and glob Markdown plan files.
The allowed-tools block explicitly includes Bash, while the rest of SKILL.md describes Markdown file creation and updates without shell execution.
Risk Factors
⚙️ External commands (71)
SKILL.md:42 SKILL.md:43 SKILL.md:48 SKILL.md:57 SKILL.md:58 SKILL.md:65 SKILL.md:66 SKILL.md:77 SKILL.md:85 SKILL.md:99 SKILL.md:100 SKILL.md:103 SKILL.md:160-181 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-190 SKILL.md:190-194 SKILL.md:194-223 SKILL.md:223-234 SKILL.md:234-238 SKILL.md:238-240 SKILL.md:240-246 SKILL.md:246-256 SKILL.md:256-273 SKILL.md:273-276 SKILL.md:276-277 SKILL.md:277-278 SKILL.md:278-279 SKILL.md:279-280 SKILL.md:280-282 SKILL.md:282-283 SKILL.md:283-288 SKILL.md:288-300 SKILL.md:300-301 SKILL.md:301-303 SKILL.md:303-304 SKILL.md:304-305 SKILL.md:305-306 SKILL.md:306-307 SKILL.md:307-310 SKILL.md:310-318 SKILL.md:318-326 SKILL.md:326-328 SKILL.md:328-338 SKILL.md:338-340 SKILL.md:340 SKILL.md:347-384 SKILL.md:384-385 SKILL.md:385-395 SKILL.md:395-399 SKILL.md:399-402 SKILL.md:402-427 SKILL.md:427-428 SKILL.md:428-434 SKILL.md:434-435 SKILL.md:435-436 SKILL.md:436-440 SKILL.md:440-442 SKILL.md:442-453 SKILL.md:453-462 SKILL.md:462-466 SKILL.md:466-474 SKILL.md:474-476 SKILL.md:476-477 SKILL.md:477-480 SKILL.md:480-489 SKILL.md:489-493 SKILL.md:493-509 SKILL.md:510-511 SKILL.md:511-514 SKILL.md:514-515
📁 Filesystem access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/diversioteam-plan-directory/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/diversioteam-plan-directory?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/diversioteam-plan-directory?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/diversioteam-plan-directory/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/diversioteam-plan-directory.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
DiversioTeam. (2026). plan-directory security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/diversioteam-plan-directory/audits/8BibTeX citation
@techreport{diversioteam-diversioteam-plan-directory-2026,
author = {DiversioTeam},
title = {plan-directory security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/diversioteam-plan-directory/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "plan-directory security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "DiversioTeam"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/diversioteam-plan-directory/audits/8"
identifiers:
- type: other
value: "skillstore:diversioteam-plan-directory:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
71
Community
78
Spec Compliance
What You Can Build
Plan a Feature Build
Break a feature into numbered tasks with dependencies, tests, and completion criteria.
Coordinate a Migration
Create a repeatable migration plan with locked decisions, blockers, and staged verification steps.
Maintain Project Progress
Update an existing plan as tasks finish, change, split, or become blocked.
Try These Prompts
Create a Basic Plan
Create a plan directory for my feature. Title: User Authentication. Slug: user-auth. Tasks: user model, login, password reset, tests.
Use a Specific Location
Create a plan in docs/plans/billing-redesign. Use the slug billing-redesign. Include tasks for data model, UI, API, migration, and QA. Keep Stripe as the payment provider.
Update an Existing Plan
Update the existing user-auth plan. Add a new task for Google OAuth, preserve all current task numbers, and mark it dependent on JWT setup.
Design a Complex Execution Plan
Create a migration plan for moving from REST to GraphQL. Include backend schema work, client migration, compatibility testing, rollout gates, rollback criteria, and parallel tasks where safe.
Best Practices
- Provide a clear title, slug, task list, and target location before generating files.
- Keep PLAN.md as an index and put detailed work inside numbered task files.
- Review generated dependencies and test steps before using the plan for execution.
Avoid
- Do not use this skill for a single informal todo list.
- Do not renumber existing tasks after work has started.
- Do not ask it to run implementation tests unless you also authorize that work separately.
Frequently Asked Questions
What does this skill create?
It creates a Markdown plan directory with a PLAN.md index and numbered task files.
Can it update an existing plan?
Yes. It reads the current PLAN.md and updates task files, checkboxes, and task indexes.
Does it execute the plan tasks?
No. It structures the plan and progress records. Execution remains a separate user decision.
Why are task files numbered?
Stable numbering keeps references, dependencies, and history clear as the plan changes.
Does it work with Claude Code and Codex?
Yes. The format is plain Markdown and the skill states support for Claude Code and OpenAI Codex.
What inputs should I provide?
Provide a plan title, slug, task list, target folder, constraints, and testing expectations.
Developer Details
Author
DiversioTeamLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
c579efd02184f1128d6741d16e6c8d951d7d4208
Maintenance freshness
7/18/2026
Usage
6 downloads · 275 views
File structure
📄 SKILL.md