janjaszczak/plan-as-contract
skills/plan-as-contract/SKILL.md
Produce a reviewable, file-referenced implementation plan that acts as a contract before execution. Use for risky ops, architecture changes, migrations, multi-file edits.
databases
Updated May 5, 2026
$ install --global
skillsauthnpx skillsauth add janjaszczak/cursor plan-as-contractInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 5, 2026, 8:46 AM148.2s1 file scanned
SKILL.md
- name:
- plan-as-contract
- description:
- Produce a reviewable, file-referenced implementation plan that acts as a contract before execution. Use for risky ops, architecture changes, migrations, multi-file edits.
- compatibility:
- Works best with Cursor Plan Mode and ability to reference repo files.
- allowed-tools:
- Read FileSearch(*)
- intent:
- Use when approval gates reduce risk and rework.
plan-as-contract
Activation gate
Use if:
- Multi-file changes, migrations, security/perf sensitive work, or irreversible ops.
Procedure
- Define objective + acceptance criteria (testable).
- Enumerate touched areas: BE/FE/DB/config/CI/CD/infra (or explicitly “NOT touched”).
- Identify dependencies (APIs, flags, secrets, external services).
- Provide ordered steps with file paths and validation commands.
- Stop: wait for user approval (unless user asked “just do it”).
Output
- Plan (steps) + Risks + Verification checklist.
Related Skills
janjaszczak/keepass
data-ai
VerifiedTrustedCommunity
KeePassXC cursor.kdbx — natywny keyring per OS, keepass-db.path bez fallbacków, agent instaluje brakujące narzędzia.
SKILL.mdUpdated Jun 5, 2026
janjaszczak/vanilla-web
development
VerifiedTrustedCommunity
Build or modify plain HTML/CSS/JavaScript (no framework) using modular ES modules (ESM), SRP, minimal global state, and shippable runnable files with lightweight verification. Use for static pages, small UI widgets, vanilla JS refactors, and quick prototypes without React/Vue/Angular.
SKILL.mdUpdated May 5, 2026
janjaszczak/troubleshooting-rca
testing
VerifiedTrustedCommunity
Perform root-cause analysis for bugs/errors/regressions using logs, repro steps, and hypothesis testing. Use when the user reports “nie działa”, stack traces, failing tests, or regressions.
SKILL.mdUpdated May 5, 2026
janjaszczak/task-planning-shrimp
tools
VerifiedTrustedCommunity
Plan, split, and track multi-step work using Shrimp Task Manager MCP (or equivalent). Use for multi-file refactors, migrations, or any work that benefits from task tracking.
SKILL.mdUpdated May 5, 2026