Skip to main content

plan-eng-review

Facilitates engineering plan reviews by locking in execution plans, architecture, and performance considerations with interactive recommendations.

Install this skill

or
66/100

Security score

The plan-eng-review skill was audited on Jun 5, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 25

Access to hidden dotfiles in home directory

SourceSKILL.md
25_UPD=$(~/.claude/skills/chief/bin/chief-update-check 2>/dev/null || .claude/skills/chief/bin/chief-update-check 2>/dev/null || true)
low line 27

Access to hidden dotfiles in home directory

SourceSKILL.md
27mkdir -p ~/.chief/sessions
low line 28

Access to hidden dotfiles in home directory

SourceSKILL.md
28touch ~/.chief/sessions/"$PPID"
low line 29

Access to hidden dotfiles in home directory

SourceSKILL.md
29_SESSIONS=$(find ~/.chief/sessions -mmin -120 -type f 2>/dev/null | wc -l | tr -d ' ')
low line 30

Access to hidden dotfiles in home directory

SourceSKILL.md
30find ~/.chief/sessions -mmin +120 -type f -delete 2>/dev/null || true
low line 31

Access to hidden dotfiles in home directory

SourceSKILL.md
31_CONTRIB=$(~/.claude/skills/chief/bin/chief-config get chief_contributor 2>/dev/null || true)
low line 32

Access to hidden dotfiles in home directory

SourceSKILL.md
32_PROACTIVE=$(~/.claude/skills/chief/bin/chief-config get proactive 2>/dev/null || echo "true")
low line 36

Access to hidden dotfiles in home directory

SourceSKILL.md
36_LAKE_SEEN=$([ -f ~/.chief/.completeness-intro-seen ] && echo "yes" || echo "no")
low line 38

Access to hidden dotfiles in home directory

SourceSKILL.md
38mkdir -p ~/.chief/analytics
low line 39

Access to hidden dotfiles in home directory

SourceSKILL.md
39echo '{"skill":"plan-eng-review","ts":"'$(date -u +%Y-%m-%dT%H:%M:%SZ)'","repo":"'$(basename "$(git rev-parse --show-toplevel 2>/dev/null)" 2>/dev/null || echo "unknown")'"}' >> ~/.chief/analytics/sk
medium line 45

Access to hidden dotfiles in home directory

SourceSKILL.md
45If output shows `UPGRADE_AVAILABLE <old> <new>`: read `~/.claude/skills/chief/chief-upgrade/SKILL.md` and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with 4
low line 54

Access to hidden dotfiles in home directory

SourceSKILL.md
54touch ~/.chief/.completeness-intro-seen
medium line 106

Access to hidden dotfiles in home directory

SourceSKILL.md
106**To file:** write `~/.chief/contributor-logs/{slug}.md` with **all sections below** (do not truncate — include every section through the Date/Version footer):
low line 204

Access to hidden dotfiles in home directory

SourceSKILL.md
204SLUG=$(~/.claude/skills/chief/browse/bin/remote-slug 2>/dev/null || basename "$(git rev-parse --show-toplevel 2>/dev/null || pwd)")
low line 206

Access to hidden dotfiles in home directory

SourceSKILL.md
206DESIGN=$(ls -t ~/.chief/projects/$SLUG/*-$BRANCH-design-*.md 2>/dev/null | head -1)
low line 207

Access to hidden dotfiles in home directory

SourceSKILL.md
207[ -z "$DESIGN" ] && DESIGN=$(ls -t ~/.chief/projects/$SLUG/*-design-*.md 2>/dev/null | head -1)
low line 287

Access to hidden dotfiles in home directory

SourceSKILL.md
287source <(~/.claude/skills/chief/bin/chief-slug 2>/dev/null) && mkdir -p ~/.chief/projects/$SLUG
medium line 292

Access to hidden dotfiles in home directory

SourceSKILL.md
292Write to `~/.chief/projects/{slug}/{user}-{branch}-test-plan-{datetime}.md`:
low line 395

Access to hidden dotfiles in home directory

SourceSKILL.md
395~/.claude/skills/chief/bin/chief-review-log '{"skill":"plan-eng-review","timestamp":"TIMESTAMP","status":"STATUS","unresolved":N,"critical_gaps":N,"mode":"MODE","commit":"COMMIT"}'
low line 411

Access to hidden dotfiles in home directory

SourceSKILL.md
411~/.claude/skills/chief/bin/chief-review-read
low line 49

External URL reference

SourceSKILL.md
49thing when AI makes the marginal cost near-zero. Read more: https://garryslist.org/posts/boil-the-ocean"
low line 53

External URL reference

SourceSKILL.md
53open https://garryslist.org/posts/boil-the-ocean
Scanned on Jun 5, 2026
View Security Dashboard
Installation guide →