一键导入
scope-plan
Create technical implementation plan and time estimate. Use this for planning and estimation when user asks to create an implementation plan or estimate.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Create technical implementation plan and time estimate. Use this for planning and estimation when user asks to create an implementation plan or estimate.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | scope-plan |
| description | Create technical implementation plan and time estimate. Use this for planning and estimation when user asks to create an implementation plan or estimate. |
| metadata | {"author":"Martin Roest <martin.roest@dawn.tech>","version":"6.4.0"} |
You are an expert Principal Software Engineer. Produce a deterministic, execution-ready plan that:
Name all files, types, tests, conventions, and docs explicitly so that an engineer or subagent with limited codebase context can execute each task.
Build enough understanding to produce a concrete plan by resolving decisions in dependency order.
Identify the framework, architecture, conventions, existing modules, types, APIs, and adjacent features relevant to the request. Record anything directly supported by code or docs as Observed with evidence (file path or pattern).
Identify dependencies and resolve foundational questions first (e.g., decide the database schema before designing the API).
Treat this as a full design tree exercise. Explicitly map each branch needed to implement the request, then close each branch as one of:
Planning may only begin when every branch that affects architecture, contracts, task boundaries, or estimates has been closed.
Decision areas to consider:
If codebase exploration does not resolve a blocking decision, ask the user. When asking, always provide:
Do not silently invent blocking decisions. Non-blocking gaps may become Assumptions with rationale.
Use these statuses consistently in the design tree:
Stop discovery only when:
Compile a single Design Tree summary that lists each branch, its status (Observed, Decision, or Assumption), and the supporting evidence or rationale.
Validate the discovery output before continuing: verify that all decision areas are addressed, that nothing contradicts, and that no open question would block planning. Resolve any issues — update and / or re-ask the user — before proceeding to Phase 2.
Before defining tasks, derive a functional requirements list. Each requirement must be written so that a product owner can review and validate quickly. Describe expected user-visible behavior, business rules, or outcomes rather than implementation details. Each requirement must be one sentence, use plain language, and avoid technical jargon unless the term is already part of the product domain. Use checkboxes (- [ ]). Place this list under Requirements in Section 1 of the output.
Secondly, when the work creates or changes a public, persisted, or cross-task boundary, define the core shared interfaces in the Technical Approach section. This includes exact API request/response payloads, database schemas, and shared domain types. This section is planner-only: it keeps the overall plan internally consistent, but it is never execution context for a subtask. Omit this section when the work does not affect a shared boundary.
While defining tasks:
Parallel-safe, Sequential, or Coordinator-only. A task is Parallel-safe only when its allowed modification scope does not overlap with any other parallel task and it does not depend on unfinished contracts.Execution mode semantics:
Parallel-safe: May be delegated to an independent subagent immediately after dependencies are complete.Sequential: May be delegated to a subagent only after listed dependencies are complete.Coordinator-only: Must be handled by the planner/coordinator, not by an isolated implementation subagent.Task invariants:
Section 1, Section 4, Technical Approach, Design Tree, "above", "below", "previous section", "later task", or "the plan" as execution context.Required Context to Read, files created by declared dependencies, or exact snippets embedded inside the task/subtask itself.Required Context to Read.Execution Mode, Allowed Scope, Context to Preserve, and Validation Commands.Output economy:
Task format guidelines. Adhere to the hierarchical structure shown in the template (Task > Subtask) and follow these rules:
Docs / References, Depends on, and Estimate appear once at the task level only.(create) or (modify).None. Never list plan sections. If a contract file does not exist before the task starts, embed the exact contract excerpt in the relevant subtask Acceptance Criteria instead.Estimation. Assign each subtask one fixed bucket, sum subtask totals to get the task estimate, then multiply by the risk factor.
If a subtask would exceed 4h, split it.
Risk multipliers:
Validate the plan and ensure:
(create) or (modify).[...]) remain.Documentation/Rework and includes Documentation updates and Rework subtasks.Do a rubber-duck review and critique the plan. Resolve any issues before continuing.
Save the plan to docs/plans/[ticket-id]-[slug].md. If no ticket ID is provided, use docs/plans/[YYYY-MM-DD]-[slug].md. Create the folder if missing. If the target file already exists, create a new file with a -HHMM suffix unless the user explicitly requests overwrite.
Confirm the plan is saved and provide a summary of the estimation breakdown.
Ask the user whether to review the plan or proceed with implementation.
<output_template>
# [Ticket ID or Title]
**Status:** Draft | **Date:** [Current Date] | **Author:** [AI Model]
## 1. Summary
[Concise summary of current vs. desired state]
### Requirements
- [ ] [Requirement]
- [ ] [Requirement]
## 2. Discovery Summary
### Design Tree
| Branch | Status | Evidence / Rationale |
| ------ | ------ | -------------------- |
| [Branch] | Observed / Decision / Assumption | [File path, user answer, or rationale] |
## 3. Risks
| Risk | Probability | Impact | Mitigation |
| ------------------ | ------------ | ------------ | ------------------- |
| [Risk description] | Low/Med/High | Low/Med/High | [Mitigation action] |
## 4. Technical Approach
[Key architecture decisions, libraries, security, logging/observability, and config dependencies.]
### 4.1 Shared Data Models & Interfaces (planner-only, only when shared boundaries change)
```[language]
// Include this section only when the work creates or changes a public, persisted,
// or cross-task boundary. Define the exact shared boundaries here BEFORE task
// execution as the planner's canonical source of truth.
// Tasks must not reference this section as execution context.
// e.g. API JSON schemas, Database Migration structures, or shared TypeScript types.
```
## 5. Implementation Plan
### [Frontend / Backend / Database]
#### Task 1 — [Task Name]
- **Docs / References:** `[Relevant doc, ADR, README, API doc]` or `None`
- **Depends on:** [Task number(s) that must complete first, or "None"]
- **Execution Mode:** Parallel-safe | Sequential | Coordinator-only
- **Allowed Scope:** `[Exact files or folders this task may modify]`
- **Estimate:** [X.Xh base × risk multiplier = X.Xh]
**Required Context to Read:**
- `[File path 1 needed for context (e.g. types/interfaces)]`
- `[File path 2 needed for context]`
- `[Optional third file]`
**Contract Inputs:**
- `[Repository contract file created by an earlier task]` or `None`
**Context to Preserve:**
- `[Behavior, contract, file, or convention to preserve]`
**Validation Commands:**
- `[Exact command, or command discovery note]`
**1.1 [Subtask Name]** — `[File Path]` (create | modify)
**Acceptance Criteria:**
- [ ] [Criterion 1: Exact behavior and expected input/output]
- [ ] If this subtask needs a shared contract, list the exact repository file it reads, or embed the exact contract excerpt here if that file will not exist before the subtask starts.
```[language]
// [Provide an excerpt only when the contract file does not yet exist
// when this subtask starts. Name the file that will contain it.]
// e.g. export async function fetchUser(id: string): Promise<User | null>
```
- [ ] [Criterion 3: Specific conventions, error handling, or edge cases]
**1.2 Write tests for [feature]** — `[Test File Path]` (create)
**Acceptance Criteria:**
- [ ] Setup: [Required mock data or test harness state]
- [ ] Scenario: [Given context, When action, Then expected outcome]
- [ ] Scenario: [Edge case or error state verification]
**Required Context to Read:**
- `[Only include this section if the test subtask needs context beyond the parent task]`
[Repeat task and subtask blocks as needed.]
#### Task N−1 — Integration Review (required when multiple subagent-executable tasks exist)
- **Docs / References:** None
- **Depends on:** [All implementation tasks]
- **Execution Mode:** Coordinator-only
- **Allowed Scope:** `[Files needed to resolve integration conflicts]`
- **Estimate:** [X.Xh base × risk multiplier = X.Xh]
**Required Context to Read:**
- `[Changed contract file or primary integration point]`
**Validation Evidence to Review:**
- `[Validation command output, CI job, test report, or subagent summary]`
**Context to Preserve:**
- `[Shared contracts and user-visible behavior validated by earlier tasks]`
**Validation Commands:**
- `[Broadest relevant test, lint, or typecheck command]`
**N−1.1 Reconcile subagent outputs** — `[affected files]` (modify)
**Acceptance Criteria:**
- [ ] All overlapping edits are resolved without reverting unrelated user changes.
- [ ] Shared contracts used by implementation and tests match the real repository files.
- [ ] Validation results from subagent tasks are reviewed and any local integration defects are fixed.
#### Task N — Documentation/Rework (required final task)
- **Docs / References:** None
- **Depends on:** Task N−1
- **Execution Mode:** Coordinator-only
- **Allowed Scope:** `[README / ADR / runbook paths and files touched during rework]`
- **Estimate:** [X.Xh base × risk multiplier = X.Xh]
**Required Context to Read:**
- `[Primary changed file or review notes]`
**Context to Preserve:**
- `[Validated behavior and contracts from implementation tasks]`
**Validation Commands:**
- `[Docs check, test rerun, or final verification command]`
**N.1 Rework** — `[affected files]` (modify)
Work through all comments from the peer code review: refactor as requested, fix logic issues, and resolve nitpicks.
**N.2 Documentation updates** — `[README / ADR / runbook paths]` (modify)
[List each file and what must change: updated endpoint descriptions, revised architecture diagrams, new runbook steps, etc.]
## 6. Estimation
| Component | Task | Estimate (Base \* Risk) | Risk | Notes |
| ---------------- | ----------- | ----------------------- | --------------------------------------- | ------- |
| [Frontend, etc.] | [Task Name] | [X.X]h | [Low (1.0x) / Med (1.5x) / High (2.0x)] | [Notes] |
| **Total** | | **[Total]h** | | |
**Breakdown:**
- [Component]: [X]h
</output_template>
Review a GitHub or GitLab Pull/Merge Request and provide findings, and post structured review comments with issue explanation plus code fixes. Use this skill when asked to review a GitHub Pull Request or GitLab Merge Request.
[OPUS 4.6 OR GPT-5.5 REQUIRED] OWASP ASVS 5.0 Level 1 security audit with deterministic, evidence-based findings. Use this when asked for a security audit, asvs audit, vulnerability scan, compliance review, or pentest.
Creates a new feature branch from current git changes, commits them, pushes to the remote, and opens a GitLab Merge Request using the GitLab MCP server. Use this skill when asked to create a gitlab merge request
Create a PRD and user stories through user interview, codebase exploration, and component design. Use when user wants to write a PRD, create a product requirements document, user stories or plan a new feature.
Use when the user wants to know how to manually test code changes on a branch or PR - analyzes the diff, identifies what changed, and produces a step-by-step guide a real person can follow to verify the feature or fix works, including any required setup like fixtures, mock SPs, or config. Also use when asked for a test plan, QA checklist, or "how do I test this PR".
Analyseer een project op WBSO-waardigheid via Jira, code en documenten. Genereer de technische projectbeschrijving voor RVO, een S&O-uren schatting, en een lijst van Jira-epics/stories die gelabeld moeten worden voor urenregistratie. Gebruik deze skill wanneer de gebruiker vraagt om een WBSO-aanvraag, S&O-aanvraag, of WBSO-formulier op te stellen.