一键导入
create-plan
Create an implementation plan in plans/ with clear goal, actionable checklists, and specific file references.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Create an implementation plan in plans/ with clear goal, actionable checklists, and specific file references.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Review recent code changes and broad codebase areas for critical and high severity security vulnerabilities. Use when Codex needs to clear `./out-security-review`, select 25 non-doc, non-test files split across past-day commits, past-week commits, and broad codebase coverage, group them into 6-8 review buckets, spawn one security-review sub-agent per review bucket, persist each candidate finding to `./out-security-review/<starting_filename>_<timestamp>.md` using a filename-safe UTC ISO 8601 basic timestamp like `20260331T214512Z`, re-verify every candidate with fresh sub-agents, and emit final confirmed findings for responsible disclosure.
Record a short Playwright-based product demo video for significant UI or user-visible functionality changes. Use when Codex needs to show a workflow in motion for a PR, either by recording an existing targeted E2E spec or by creating a disposable one-off Playwright spec that captures the changed behavior in under a minute, then uploading the final video to Vercel Blob and preparing a PR comment body that says "Demo at commit {hash}" with a 1-2 sentence summary and durable hosted link.
Review the last 7 days of recent commits for large architecture improvements that dramatically improve maintainability. Use when the agent needs to clear `./out-code-architect`, select 25 non-doc, non-test files from recent commits across different parts of the repo, spawn one architecture-review sub-agent per starting file, persist each candidate finding to `./out-code-architect/<starting_filename>_<timestamp>.md` using a filename-safe UTC ISO 8601 basic timestamp like `20260331T214512Z`, re-verify every candidate with fresh sub-agents, and emit final confirmed findings for issue filing.
Review the last 7 days of recent commits for critical and high severity bugs that break user experience. Use when the agent needs to clear `./out-bug-finder`, select 25 non-doc, non-test files from recent commits across different parts of the repo, spawn one bug-review sub-agent per starting file, persist each candidate finding to `./out-bug-finder/<starting_filename>_<timestamp>.md` using a filename-safe UTC ISO 8601 basic timestamp like `20260331T214512Z`, re-verify every candidate with fresh sub-agents, and emit final confirmed findings for issue filing.
Review recent GitHub Actions workflow runs, separate expected noise from actionable failures, and write a machine-readable workflow health report for deterministic post-agent issue handling.
Print the full host-side `scripts/pr.sh` command needed to create or switch to a feature branch, commit current changes, push, and open or update a PR outside the Docker sandbox using explicit flag-style inputs.
| name | create-plan |
| description | Create an implementation plan in plans/ with clear goal, actionable checklists, and specific file references. |
Use this skill when the user asks you to create an implementation plan, execution plan, or roadmap for a task.
This is a critical plan. Before writing a single line of the plan, you MUST thoroughly interrogate the requirements. Do not assume you understand the task from a brief description. Plans built on wrong assumptions waste far more time than the questions cost.
a) Ask clarifying questions aggressively. Use AskUserQuestion to surface hidden assumptions and ambiguity. Do NOT proceed to writing the plan until the user has answered your questions. Ask about:
b) State your assumptions back to the user. After initial research, explicitly list what you believe to be true and ask the user to confirm or correct. For example: "I'm assuming X, Y, and Z — is that right, or am I off on any of these?"
c) Ask follow-up questions. The first round of answers will often reveal new ambiguities. Ask a second round of targeted questions before proceeding. It is better to ask too many questions than to build a plan on shaky foundations.
Before writing the plan, thoroughly explore the files and architecture that will be affected. Identify the specific files that need changes, understand existing patterns, and find any constraints or risks. Cross-reference what you find with the user's answers from Step 1 — if the codebase contradicts an assumption, flag it immediately.
Before writing the full plan, present a brief summary of your proposed approach (2-5 bullet points) and ask the user to approve the direction. This catches misalignment early before you invest in the detailed plan. Include:
Write the plan to plans/<slug>.md using the template below. The slug should be a short kebab-case name describing the work (e.g., add-webhook-retries, refactor-auth-flow).
Review the plan against the quality checklist before presenting it to the user. Ask the user to review and flag anything that looks wrong or incomplete.
# Plan: <Title>
## Status: Draft
<!-- When completed: change to "## Status: Done", add [PLAN HAS BEEN COMPLETED] and [PLAN DONE AT COMMIT <hash>] here -->
## Goal
<1-3 sentences describing what this plan achieves and what the end state looks like when complete.>
## Problem
<Why this work is needed. What's broken, missing, or suboptimal today.>
## Non-Goals
<Explicit list of things this plan does NOT cover. Helps prevent scope creep.>
## Implementation Plan
### Phase 1: <Phase Name>
**Files changed:**
- `path/to/file.ts`
- `path/to/other-file.ts`
**Steps:**
- [ ] First concrete action item
- [ ] Second concrete action item
- [ ] Third concrete action item
**Verification:** <How to confirm this phase is correct — e.g., which tests to run, what to check.>
### Phase 2: <Phase Name>
...continue for each phase...
## Files Changed
<Summary list of all files created, modified, or deleted across all phases.>
## Risks and Mitigations
| Risk | Likelihood | Impact | Mitigation |
| ------------- | --------------- | --------------- | --------------- |
| <description> | Low/Medium/High | Low/Medium/High | <how to handle> |
## Definition of Done
- [ ] <Criterion 1>
- [ ] <Criterion 2>
- [ ] <Criterion 3>
Before finalizing the plan, verify all of these:
- [ ] item is a concrete action (create, modify, add, remove, update), not a vague instruction like "consider" or "think about".## Iteration Log
| Iteration | Timestamp | Summary | Commit | Errors/Issues |
| --------- | --------- | ------- | ------ | ------------- |
Commit column: After each $commit, run git rev-parse --short HEAD and record the hash. Multiple commits in one iteration are comma-separated. Use "—" if no commits were made.
Plan completion: When the plan is fully done:
$commit.git rev-parse --short HEAD.## Status: Draft to ## Status: Done.[PLAN HAS BEEN COMPLETED] on the line after the Status heading.[PLAN DONE AT COMMIT <hash>] on the next line using the final commit hash.