ZappushZappush
SkillsUse CasesBenchmarkCommunitySign In
      Back to Skills
      zlc000190

      Safety Report

      Writing Plans

      @zlc000190

      Use when you have a spec or requirements for a multi-step task, before touching code

      1,818Downloads
      21Installs
      2Stars
      1Versions
      Project Management1,537Design & Prototyping842

      Security Analysis

      high confidence
      Clean0.08 risk

      The skill's requests and runtime instructions are consistent with its stated purpose (producing implementation plans); it requires no credentials or installs and is instruction-only.

      Feb 11, 20261 files2 concerns
      Purpose & Capabilityok

      Name/description (produce step-by-step implementation plans) align with the SKILL.md: it only asks the agent to create plan documents, list file paths, commands, and test steps. There are no unrelated environment variables, binaries, or install steps requested.

      Instruction Scopenote

      Instructions stay within planning: create plan files, enumerate exact file paths, provide code snippets, and include git/pytest commands and expected outputs. This is appropriate for an implementation-planning skill, but the SKILL.md explicitly requires embedding complete code and exact commands and references external sub-skills (superpowers:executing-plans, superpowers:subagent-driven-development). That increases the potential for subsequent automated execution (by other skills) — the plan itself does not perform I/O or network activity.

      Install Mechanismok

      No install spec or downloaded code; instruction-only skills write nothing to disk by themselves. Lowest risk for install mechanism.

      Credentialsok

      Requires no environment variables, credentials, or config paths. Nothing disproportionate requested relative to the stated purpose.

      Persistence & Privilegenote

      always:false and default autonomous invocation are set (normal). The main consideration is that the skill instructs use of other sub-skills that may execute plans, run tests, and commit code — evaluate those sub-skills' privileges before enabling autonomous invocation. The skill itself does not request persistent or system-wide privileges.

      Guidance

      This skill is internally coherent and does not request secrets or installs. Before enabling it for autonomous use, verify the provenance and permissions of any referenced sub-skills (superpowers:executing-plans, superpowers:subagent-driven-development) because they are the components that would actually run commands or modify your repository. Prefer running it manually or in a dedicated worktree at first, review saved plan files (docs/plans/...) for accidental inclusion of secrets or sensitive file paths, and confirm any automated executors have limited, audited access to only the intended repository/worktree.

      Latest Release

      v0.1.0

      Initial release: 编写计划

      More by @zlc000190

      Writing Skills

      4 stars

      Dispatching Parallel Agents

      2 stars

      Requesting Code Review

      2 stars

      Subagent Driven Development

      2 stars

      Brainstorming

      1 stars

      Using Superpowers

      1 stars

      Published by @zlc000190 on ClawHub

      Zappush© 2026 Zappush
      HomeGuaranteeSupport

      Something feels unusual? We want to help: [email protected]