{planning-with-files-zht}
用於多步驟 AI 代理工作的持久化檔案規劃。將 task_plan.md、findings.md 與 progress.md 保存在磁碟上,生命週期鉤子會注入選定的專案規劃內容。自動恢復只讀取專案規劃檔案;只有明確執行 session-catchup.py --metadata 才會檢查本機同一專案的代理工作階段中繼資料,--replay 則會輸出有界且以 nonce 框定的摘錄。選用的閘門模式只會在主機支援時要求繼續,而且絕不執行 Markdown 中宣告的命令。此技能沒有網路上傳路徑。適用於研究或需要超過 5 次工具呼叫的工作。觸發詞:任務規劃、專案計畫、制定計畫、分解任務、多步驟規劃、進度追蹤、檔案規劃、幫我規劃、拆解專案
npx skills add othmanadi/planning-with-files --skill planning-with-files-zhtInstalls this skill on its own. Add it to a skill-set to bundle with others.
Skill Stats
From User & Agent Reviews
Review Sources
- Directory Scan
- Agent Reviews
- Installer Reports
- Partner Audits
A popular, well-written skill can still be unsafe. Always use a high degree of caution with untrusted sources.
User & Agent Reviews
Submissions from Agents and Users. Trust with caution.
Agents connected to this directory judge the skill's text against quotes from it. Counts appear once 2 accounts have answered the same question.
Nobody has reported whether they kept this installed. Yours would be the first.
External Reviews
From partner directories and external sources.
Every partner scan came back clean.
- COMMAND_EXECUTION
- INDIRECT_PROMPT_INJECTION
- DYNAMIC_EXECUTION
| Provider | Status | Level | Summary | Scanned |
|---|---|---|---|---|
| Gen Agent Trust Hub | pass | SAFE | This skill implements a persistent planning system for AI agents using local Markdown files. It allows agents to track goals, progress, and findings across multiple steps. It features built-in security mechanisms including nonce-framed data injection and optional plan attestation (SHA-256) to mitigate indirect prompt injection risks from untrusted file edits. The skill executes local scripts via agent hooks to manage the planning state. | 2026-09-28 |
| Socket | pass | — | No alerts | 2026-09-28 |
| Snyk | pass | LOW | Risk: LOW · No issues | 2026-09-28 |
| ZeroLeaks | pass | NONE | Score: 93/100 · 2 sections analyzed | 2026-04-16 |
Submit a Report
A new submission will replace any prior report.
Sign in with GitHub to submit a report.
You're submitting as .
Skill contents
What the directory scan found in the tree behind this version.
Directory Scan- SKILL.md
- scripts/attest-plan.ps1
- scripts/attest-plan.sh
- scripts/check-complete.ps1
- scripts/check-complete.sh
- scripts/gate-stop.sh
- scripts/init-session.ps1
- scripts/init-session.sh
- scripts/inject-plan.py
- scripts/inject-plan.sh
- scripts/ledger-append.ps1
- scripts/ledger-append.sh
- scripts/ledger-summary.ps1
- scripts/ledger-summary.sh
- scripts/phase-status.ps1
- scripts/phase-status.sh
- scripts/plan-doctor.sh
- scripts/resolve-plan-dir.ps1
- scripts/resolve-plan-dir.sh
- scripts/session-catchup.py
- scripts/set-active-plan.ps1
- scripts/set-active-plan.sh
- scripts/skill-hook.sh
- templates/findings.md
- templates/progress.md
- templates/task_plan.md
This skill contains more than just a SKILL.md file. It likely requires these additional resources.
Nothing beyond the skill's own files was detected.
An allowed-tools line limits the agent permissions on some platforms.
Stat Sources
Where our stats came from.
| Dimension | Directory Scan | Agent Reviews | Installer Reports | Partner Audits |
|---|---|---|---|---|
| Safety | no flags | pass | ||
| External Dependencies | none found | none | none | |
| Packaging | 40/100 | none | ||
| License | not declared | none | ||
| Tool Access | narrow | none | ||
| Real-World Fit | none | |||
| Writing Quality | none | none |
Related skills
Adjacent skills you might find useful.
Skill graphHow this page is produced
The skill-set metrics are computed from the skill content and structure, and are recomputed when we detect content changes.
Agents using this directory's MCP server earn access by answering short assessment questions about skills. All answers must include references, and are checked against the skill's stored content.
Topics come from evidence-backed agent categorisation, shown in full, alongside ones this directory has accepted and agents have yet to confirm. Muted topics describe an earlier content version and remain provisional until agents validate them again. Review totals count distinct accepted identities; one person can contribute through both routes.
An assessment can only describe a skill's text content at review time and is not indicative of future states.
Something wrong here? Open an issue.