Use when you have a spec or requirements for a multi-step task, before touching code
Security Analysis
high confidenceThe skill's requests and runtime instructions are consistent with its stated purpose (producing implementation plans); it requires no credentials or installs and is instruction-only.
Name/description (produce step-by-step implementation plans) align with the SKILL.md: it only asks the agent to create plan documents, list file paths, commands, and test steps. There are no unrelated environment variables, binaries, or install steps requested.
Instructions stay within planning: create plan files, enumerate exact file paths, provide code snippets, and include git/pytest commands and expected outputs. This is appropriate for an implementation-planning skill, but the SKILL.md explicitly requires embedding complete code and exact commands and references external sub-skills (superpowers:executing-plans, superpowers:subagent-driven-development). That increases the potential for subsequent automated execution (by other skills) — the plan itself does not perform I/O or network activity.
No install spec or downloaded code; instruction-only skills write nothing to disk by themselves. Lowest risk for install mechanism.
Requires no environment variables, credentials, or config paths. Nothing disproportionate requested relative to the stated purpose.
always:false and default autonomous invocation are set (normal). The main consideration is that the skill instructs use of other sub-skills that may execute plans, run tests, and commit code — evaluate those sub-skills' privileges before enabling autonomous invocation. The skill itself does not request persistent or system-wide privileges.
Guidance
This skill is internally coherent and does not request secrets or installs. Before enabling it for autonomous use, verify the provenance and permissions of any referenced sub-skills (superpowers:executing-plans, superpowers:subagent-driven-development) because they are the components that would actually run commands or modify your repository. Prefer running it manually or in a dedicated worktree at first, review saved plan files (docs/plans/...) for accidental inclusion of secrets or sensitive file paths, and confirm any automated executors have limited, audited access to only the intended repository/worktree.
Latest Release
v0.1.0
Initial release: 编写计划
More by @zlc000190
Published by @zlc000190 on ClawHub