Plan

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent planning skill, but it can search past Claude Code sessions and code across other projects without clear boundaries.

Install only if you are comfortable with an agent researching your repository and, when MCP tools are available, searching past sessions and other projects for precedent. Consider disabling those MCP tools or limiting the instruction to the current workspace if your chat history or other projects contain confidential information.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may inspect project files and create or edit planning documents in the repository.

Why it was flagged

The skill can read/search the repository, run limited shell commands, and write plan files. These tools are sensitive but align with the planning workflow described.

Skill content
allowed-tools: Read, Grep, Bash, Glob, Write, Edit, AskUserQuestion ...
...
find . -maxdepth 3 ...
...
mkdir -p $PLAN_ROOT
Recommendation

Use it in repositories where codebase inspection and docs/plan file creation are acceptable; review generated plan files before committing.

What this means

Private details from past conversations or other projects could influence or appear in the current plan, and stale or poisoned prior context could affect recommendations.

Why it was flagged

The skill instructs the agent to search persistent chat history and code from other projects before producing the plan, without clear limits on which sessions/projects are in scope or how sensitive retrieved content should be handled.

Skill content
`session_search(query)` — find similar past work in Claude Code chat history
...
`project_code_search(query, project)` — find reusable code across projects
...
Search past sessions ... BEFORE planning
Recommendation

Only enable the solograph MCP tools if you are comfortable with cross-session and cross-project retrieval; otherwise disable those tools or instruct the agent to search only the current repository and not include secrets or unrelated project details.