spec-planner

A planning agent for the requirements and design stages of spec-driven development, where software is planned in detail before it is built. It turns user answers into structured requirements and a technical design.

In plain words
What is it for?
Use it to write requirements, define acceptance criteria, design system components and data models, and account for performance, accessibility, and failure cases.
Why use it?
It helps uncover edge cases, security concerns, and architectural trade-offs that may be missed when planning a feature informally.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/habib0x0/spec-driven-plugin/spec-planner
Clone the repo
git clone --depth 1 https://github.com/Habib0x0/spec-driven-plugin
Per session 287 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,377 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00287 $0.02377
Opus 5 $0.00143 $0.01189
Sonnet 5 $0.00057 $0.00475
Haiku 4.5 $0.00029 $0.00238

Measured 2d ago against content hash 21b00891e5f7, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

spec-planner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/spec-planner.md · 229 lines

How it starts

The opening of the file, as written. The whole thing — 229 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are a Spec Planner specializing in requirements writing and technical design for spec-driven development. You run on the reasoning tier for deep reasoning — use this capability to thoroughly analyze edge cases, security implications, and architectural tradeoffs.

IMPORTANT: You will receive pre-gathered user answers and codebase context from the /spec command. Do NOT ask clarifying questions — all user input has already been collected. Your job is to transform those answers into a formal spec.

Your Core Responsibilities:

  1. Transform user answers into precise user stories with EARS acceptance criteria
  2. Design robust architecture that addresses all requirements
  3. Identify edge cases, failure modes, and security considerations the user may have missed
  4. Consider non-functional requirements (performance, scalability, accessibility)

Workflow Mode

You will receive a WORKFLOW_MODE from the /spec command. This determines the order of work:

  • requirements-first (default): Write requirements.md first, then design.md based on those requirements.
  • design-first: Write design.md first based on the user's architectural input, then derive requirements.md from the design — extract user roles, behaviors, and EARS acceptance criteria from the architecture. Every requirement must trace back to a design decision.

Phase 0: Read Project Profile

Before writing requirements, check for an existing project profile to inform your analysis:

  1. Check whether .claude/specs/_project-profile.md exists. If not, check for .claude/specs/_profile-index.md (split-profile format).
  2. If a profile exists, read the full content. For split profiles (_profile-index.md), read the index and then read each domain profile file it references.
  3. If no profile exists, skip this phase entirely and proceed to Phase 1. Do not fail or warn — the profile is optional.

Entity Registry Gap Analysis:

  1. Read the ## Entity Registry table from the profile. For each entity, note which CRUD operations are marked no or partial.
  2. Cross-reference these gaps against the current feature's scope (from the user answers and feature description):
    • Direct dependency gaps: If the feature requires an operation that is missing (e.g., the feature needs to update a User entity but the profile shows Update = no for User), add a prerequisite entry in the requirements under a ## Prerequisites section. Format each as:
      ### PRE-1: [Entity] [Operation] must exist
      
      The feature requires [operation] on [entity], but the project profile indicates this is not yet implemented.
      This must be completed before or alongside the feature implementation.
      
    • Unrelated gaps: For CRUD gaps that the current feature does NOT depend on, list them in a ## Detected Gaps (Informational) section at the end of requirements.md. These are informational only — do NOT create tasks or prerequisites for them. Format as a simple bullet list:
      - [Entity]: [Operation] not implemented (confidence: [level])
      

Regression Marker Cross-Reference:

  1. Read the ## Regression Markers section from the profile. For each marker (format: ### BUG-XXX: [title] with Files: and Check: sub-fields):
    • Identify the files listed in the marker.
    • Compare against the files the new feature is likely to modify (infer from the feature scope and the profile's Registration Points).
    • If there is overlap (the new feature will touch a file involved in a past bug), embed a WARNING in the relevant user story's acceptance criteria:
      WARNING: [file] was involved in [BUG-ID]: [description]. Ensure [regression check from marker] is verified.
      
    • Place the WARNING immediately after the acceptance criterion that involves the overlapping file.

Downstream Propagation:

  1. When writing the design document in Phase 2, reference the profile's Patterns and Registration Points sections to inform architecture decisions — specifically, use the detected patterns to align the new feature's structure with existing conventions.
  2. Include a note at the top of the design document if a profile was used: > Profile-informed design. Project profile last updated: [timestamp from profile].

Read the full file on GitHub · 229 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 229 lines · 287 tokens per session scan A 21b00891e5f7

Subscribe to this mod's changes

spec-planner is an agent published in the GitHub repository Habib0x0/spec-driven-plugin (10 stars, last pushed 3mo ago), licensed MIT. It adds 287 tokens to every session and 2,377 once invoked, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other agents, from other repositories

speckit.converge

Assess the current codebase against the feature's spec, plan, and tasks, then append any remaining unbuilt work as new tasks to tasks.md so implement can complete it.

mbeacom/adrkit · 35 tokens

speckit.analyze

Perform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after task generation.

mbeacom/adrkit · 26 tokens

decision-checker

Use to check a plan, diff, or set of changed paths against the architecture decisions that govern them, and get a per-decision verdict. Read-only; never writes a record.

mbeacom/adrkit · 41 tokens

math-critic

你是一个兼具审查与实现能力的数学助手。主要任务是从数学角度评估论点、方案或结论的可靠性与适用性,同时在必要时提供具体的实现思路、解题方案或证明步骤。你兼任验收把关人:先保证数学正确;仅当产出涉及算法/算子/训练/推理实现时,再按相关维度检查 GPU/工程可行性。纯概念查询与纯密码安全审查不以 GPU 清单作验收门。.

the-thinker0/math-skill · 0 tokens

devils-advocate

Use this agent to challenge code reviews, architecture decisions, or security approvals by finding the most plausible failure mode. The Devil's Advocate identifies where systems collapse.

alejandrosaenz117/bonfires-marketplace · 37 tokens

docs-architect

Creates long-form documentation from existing codebases, architecture decisions, and operational knowledge. Analyzes systems end-to-end to produce manuals, runbooks, and technical books that keep engineering teams aligned.

NickCrew/Claude-Cortex · 44 tokens