MetalHexx/rad-plan-audit
greenfield/harness-files/skills/rad-plan-audit/SKILL.md
Audit the two-doc planning set (Requirements + Master Plan) for codebase accuracy, cross-document cohesion, and explosion-readiness. Two modes: self-review (planner-time) and full audit (reporter subagent; orchestrator dispatches a planner subagent to apply fixes).
$ install --global
skillsauthnpx skillsauth add MetalHexx/RadOrchestration rad-plan-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 17, 2026, 2:06 AM235.6s5 files scanned
SKILL.md
- name:
- rad-plan-audit
- description:
- Audit the two-doc planning set (Requirements + Master Plan) for codebase accuracy, cross-document cohesion, and explosion-readiness. Two modes: self-review (planner-time) and full audit (reporter subagent; orchestrator dispatches a planner subagent to apply fixes).
- user-invocable:
- true
Plan Audit
Validates the planning set — {NAME}-REQUIREMENTS.md and
{NAME}-MASTER-PLAN.md — across three dimensions:
- Codebase Accuracy — do docs correctly describe the existing code they reference?
- Cross-Document Cohesion — do Requirements and Master Plan align without gaps, contradictions, or drift?
- Buildability — is the Master Plan explosion-ready: every ID covered, every step tagged, every task structurally complete?
Phase Plans and Task Handoffs are deterministic explosion artifacts and
are out of scope here — they're validated post-execution by rad-code-review.
The audit rubric defines exactly what counts as a finding. The calibration clause governs severity.
Mode Selection
| Mode | When to use | Workflow |
|------|-------------|----------|
| Self-Review | You are a planning agent creating or revising one of the two docs | self-review.md |
| Full Audit | Reviewing both docs after creation | full-audit.md |
| Corrections | You are the planner subagent dispatched to apply an issues_found audit report | corrections-workflow.md |
Load the appropriate workflow document and follow it.
Related Skills
MetalHexx/rad-repo
development
VerifiedTrustedCommunity
Use this skill whenever a task might involve code beyond the current working directory — when you're figuring out where code lives, scoping work that may span multiple repositories, or about to act as if the current repo is the whole system — and whenever the user wants to register, bind, describe, group, or manage repositories and repo-groups. The repo registry is your map of the repos a team works across and how they relate.
6SKILL.mdUpdated Jun 4, 2026
MetalHexx/rad-ui-stop
tools
VerifiedTrustedCommunity
Stop the detached radorch dashboard UI server (SIGTERM).
6SKILL.mdUpdated May 21, 2026
MetalHexx/rad-ui-status
business
VerifiedTrustedCommunity
Report whether the radorch dashboard UI server is running, and its URL.
6SKILL.mdUpdated May 21, 2026
MetalHexx/rad-ui-start
business
VerifiedTrustedCommunity
Start the radorch dashboard UI as a detached server and report the URL.
6SKILL.mdUpdated May 21, 2026