Skills plan-approval
📦
plan-approval
Content revision r1 Safe ⚙️ External commands
Control AI Coding Plans Before Execution
Complex AI coding changes can move too quickly and create avoidable risk. This skill gives Claude, Codex, and Claude Code a structured approval workflow before execution begins.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "plan-approval" from https://skillstore.io/skills/dojocodinglabs-plan-approval.md and its manifest at https://skillstore.io/api/skills/dojocodinglabs-plan-approval/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "plan-approval". Add Stripe subscription billing to the app.
Expected outcome:
- A structured plan lists new Stripe client, checkout, webhook, pricing, package, environment example, and database migration changes.
- The plan explains why Stripe Checkout was chosen, notes webhook and state sync risks, estimates time, and asks for approve, modify, or reject.
Using "plan-approval". Continue the approved implementation, but use a different payment flow.
Expected outcome:
- A deviation notice compares the approved approach with the new approach.
- The assistant explains affected files, risk changes, and asks for renewed approval before continuing.
Using "plan-approval". Show the status of the approved plan.
Expected outcome:
- A progress summary shows approved time, current step, completed tasks, remaining tasks, and the next planned action.
- The summary keeps implementation status tied to the approved plan.
Security Audit
Safev8 • 7/6/2026 Open versioned report
Command, sensitive-file, and reconnaissance matches are false positives from Markdown examples, inline code, and workflow prose. I found no executable code, secret access, network activity, or prompt injection attempt.
1
Files scanned
693
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (61)
SKILL.md:126-150 SKILL.md:150-154 SKILL.md:154-184 SKILL.md:184-185 SKILL.md:185-186 SKILL.md:186-189 SKILL.md:189-190 SKILL.md:190-193 SKILL.md:193-194 SKILL.md:194-195 SKILL.md:195-196 SKILL.md:196-229 SKILL.md:229 SKILL.md:233 SKILL.md:257-258 SKILL.md:258-259 SKILL.md:259-261 SKILL.md:261-269 SKILL.md:269-282 SKILL.md:282-307 SKILL.md:307-318 SKILL.md:318-324 SKILL.md:324-341 SKILL.md:341-349 SKILL.md:349-359 SKILL.md:359-363 SKILL.md:363-393 SKILL.md:393-401 SKILL.md:401-418 SKILL.md:418-423 SKILL.md:423-433 SKILL.md:433-437 SKILL.md:437-449 SKILL.md:449-470 SKILL.md:470-491 SKILL.md:491-499 SKILL.md:499-517 SKILL.md:517-571 SKILL.md:571-573 SKILL.md:573-577 SKILL.md:577-588 SKILL.md:588-589 SKILL.md:589-590 SKILL.md:590-591 SKILL.md:591-592 SKILL.md:592-595 SKILL.md:595-596 SKILL.md:596-597 SKILL.md:597-600 SKILL.md:600-601 SKILL.md:601-602 SKILL.md:602-627 SKILL.md:627-631 SKILL.md:631-633 SKILL.md:633-637 SKILL.md:637-647 SKILL.md:647-651 SKILL.md:651-666 SKILL.md:666-686 SKILL.md:686-688 SKILL.md:688
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/dojocodinglabs-plan-approval/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/dojocodinglabs-plan-approval?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/dojocodinglabs-plan-approval?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dojocodinglabs-plan-approval/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/dojocodinglabs-plan-approval.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
DojoCodingLabs. (2026). plan-approval security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dojocodinglabs-plan-approval/audits/8BibTeX citation
@techreport{dojocodinglabs-dojocodinglabs-plan-approval-2026,
author = {DojoCodingLabs},
title = {plan-approval security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/dojocodinglabs-plan-approval/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "plan-approval security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "DojoCodingLabs"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/dojocodinglabs-plan-approval/audits/8"
identifiers:
- type: other
value: "skillstore:dojocodinglabs-plan-approval:audit:8"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
71
Community
87
Spec Compliance
What You Can Build
Approve Risky Refactors
Review proposed architecture, file changes, risks, and rollback steps before an AI assistant changes many files.
Control Database Changes
Require a clear migration plan before schema, RLS, index, or data changes are made.
Document Agent Decisions
Keep records of approved, rejected, and completed plans so future sessions can use prior preferences.
Try These Prompts
Create a Basic Plan
Create a short plan for this change before implementation. Include files affected, risks, estimated time, and ask for approval.
Require Approval for Risky Work
Before making this risky change, prepare a detailed approval plan. Include alternatives, rollback steps, tests, and the exact approval options.
Revise a Rejected Plan
Revise the previous plan based on my feedback. Show what changed, what risks remain, and ask for approval again before implementation.
Track a Plan Deviation
Compare the current implementation path with the approved plan. Identify any deviation, explain the impact, and ask whether to proceed, revise, or revert.
Best Practices
- Require explicit approval before complex, risky, breaking, or production-impacting changes.
- Include risks, alternatives, testing strategy, and rollback steps in detailed plans.
- Ask for renewed approval when implementation meaningfully diverges from the approved plan.
Avoid
- Treating silence or unclear feedback as approval to proceed.
- Creating vague plans that omit files, risks, tests, or rollback details.
- Continuing after a major deviation without showing the user the impact.
Frequently Asked Questions
Does this skill execute approval commands?
No. It describes a workflow and example commands, but it does not provide executable tooling.
When should approval be required?
Use approval for database changes, breaking APIs, dependency updates, file deletions, deployments, and broad refactors.
Can this work with Claude, Codex, and Claude Code?
Yes. The workflow is written as agent guidance and can be used with Claude, Codex, and Claude Code sessions.
What should a good plan include?
A good plan names affected files, rationale, alternatives, risks, tests, rollback steps, and estimated time.
What happens if the user rejects a plan?
The skill recommends saving the rejection, learning from the reason, and not proceeding with implementation.
Does it protect production systems automatically?
No. It improves decision discipline, but it does not enforce repository permissions or production access controls.
Developer Details
Author
DojoCodingLabsLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/DojoCodingLabs/claude-code-waypoint/tree/main/.claude/skills/plan-approvalRef
72d5025b022c77f7a51bdf5c1637c689c80e89d1
Maintenance freshness
7/18/2026
Usage
3 downloads · 286 views
File structure
📄 SKILL.md