Review PlanCAUTION
The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
Overview
The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
d90170da4369OBSERVED · 2026-10-07Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| claude-code | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: review-plan description: Structured plan review across 4 axes before writing any code (inspired by Garry Tan's workflow) argument-hint: "[plan_file]" effort: medium when_to_use: "Use when a plan or spec needs adversarial review before implementation starts." disable-model-invocation: true --- # Review plan before implementation Review the current plan thoroughly before making any code changes. For every issue or recommendation, explain the concrete tradeoffs, give an opinionated recommendation, and ask for user input before assuming a direction. ## Engineering preferences Use these to guide your recommendations (override with project-specific CLAUDE.md preferences if they exist): - DRY is important: flag repetition aggressively - Well-tested code is non-negotiable: prefer too many tests over too few - Code should be "engineered enough": not under-engineered (fragile, hacky) and not over-engineered (premature abstraction, unnecessary complexity) - Err on the side of handling more edge cases, not fewer - Bias toward explicit over clever; thoughtfulness over speed ## Review pipeline Work through each section sequentially. After each section, pause and ask for feedback before moving on. ### 1. Architecture review Evaluate: - Overall system design and component boundaries - Dependency graph and coupling concerns - Data flow patterns and potential bottlenecks - Scaling characteristics and single points of failure - Security architecture (auth, data access, API boundaries) ### 2. Code quality review Evaluate: - Code organization and module structure - DRY violations (be aggressive here) - Error handling patterns and missing edge cases (call these out explicitly) - Technical debt hotspots - Areas that are over-engineered or under-engineered relative to engineering preferences ### 3. Test review Evaluate: - Test coverage gaps (unit, integration, e2e) - Test quality and assertion strength - Missing edge case coverage (be thorough) - Untested failure modes and error paths ### 4. Performance review Evaluate: - N+1 queries and database access patterns - Memory-usage concerns - Caching opportunities - Slow or high-complexity code paths ## Issue reporting format For every specific issue found (bug, smell, design concern, or risk): 1. Describe the problem concretely, with file and line references 2. Present 2-3 options, including "do nothing" where that's reasonable 3. For each option, specify: implementation effort, risk, impact on other code, and maintenance burden 4. Give your recommended option and why, mapped to engineering preferences above 5. Ask explicitly whether the user agrees or wants to choose a different direction before proceeding ## Workflow - Do not assume priorities on timeline or scale - After each section, pause and ask for feedback before moving on - Use AskUserQuestion for structured option selection ## Before starting Ask if the user wants one of two options: 1. **BIG CHANGE**: Work through this interactively, one section at a time (Architecture → Code Quality → Tests → Performance) with at most 4 top issues in each section 2. **SMALL CHANGE**: Work through interactively ONE question per review section ## Tips - Combine with `.claude/rules/` files for project-specific review criteria - Engineering preferences above can be overridden by your project's CLAUDE.md - For deeper analysis, use this command with Opus model ## Sources - Inspired by [Garry Tan's Plan Mode prompt](https://garrytan.com/) (Feb 2026) - Adapted for Claude Code's native config system $ARGUMENTS
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
whitepapers/recap-cards/en/_extensions
whitepapers/recap-cards/fr/_extensions
Gates applied: no_behavioural_pass.
d90170da4369full audit observations/trust-audit/skill/florianbruniaux__review-plan.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | d90170da4369 | CAUTION | B | 89 | first audit |
Questions
What does the Review Plan skill do?
The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.
Is Review Plan safe to install?
With care. The audit graded it B (89/100) and found 2 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Review Plan access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Review Plan work with?
Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (d90170da4369), read on 2026-10-07. The repository is watched, and a new audit runs when it changes — this is the first audit.