Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/bewatermyfriend7/skill-project/code-change-plannpx skills add BeWaterMyFriend7/SKILL-PROJECT --skill code-change-plangit clone --depth 1 https://github.com/BeWaterMyFriend7/SKILL-PROJECTWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bewatermyfriend7/skill-project/code-change-plan)<a href="https://agentmods.dev/skills/bewatermyfriend7/skill-project/code-change-plan"><img src="https://agentmods.dev/badge/skills/bewatermyfriend7/skill-project/code-change-plan.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00028 | $0.00874 |
| Opus 5 | $0.00014 | $0.00437 |
| Sonnet 5 | $0.00006 | $0.00175 |
| Haiku 4.5 | $0.00003 | $0.00087 |
Grade A, and why
code-change-plan scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Code Change Plan
将需求转换为可执行的代码变更方案。
原则： 先分析 → 再设计 → 产出方案 → 等待审批
核心流程
1. 理解需求
- 业务目标是什么？
- 要实现哪些功能？
- 如何验收？
2. 分析现状
- 当前如何实现的？
- 与目标的差距在哪？
3. 设计方案
- 如何实现目标？
- 为什么这样设计？
- 会影响哪些地方？
4. 制定计划
- 改哪些文件？
- 如何验证？
- 有什么风险？
5. 输出方案
- 文件：.code/change-plans/<需求描述>-YYYYMMDD-HHMMSS.md
- 状态：等待审批
输出报告（简洁版 - 4 章）
报告包含 4 个核心部分：
| 部分 | 内容 | 为什么需要 |
|---|---|---|
| 1️⃣ 要做什么 | 需求、验收标准、待决策问题 | 确保理解正确 |
| 2️⃣ 怎么做 | 技术方案、关键决策、流程对比 | 明确实现思路 |
| 3️⃣ 改哪些 | 文件清单（白名单）、影响范围 | 控制变更范围 |
| 4️⃣ 如何验证 | 验证步骤、风险与回滚 | 质量保证 |
报告语义化
输出文件名示例：
.code/change-plans/新增用户登录功能-20260704-143052.md
.code/change-plans/优化数据库查询性能-20260704-150230.md
.code/change-plans/修复订单计算错误-20260704-161520.md
控制台输出示例：
✓ 代码变更方案已生成
【需求】新增用户登录功能
【方案】添加 AuthService + JWT 认证
【影响】6 个文件（新增 3，修改 3）
【风险】中等
【状态】等待审批
文件：.code/change-plans/新增用户登录功能-20260704-143052.md
请审核方案后执行。
调用方式
/code-change-plan
需求：实现用户登录功能
- 支持用户名密码登录
- 返回 JWT token
执行规则
生成方案时遵守以下规则：
- 只分析不改代码 - 生成方案文档，不修改业务代码
- 使用简洁模板 - 使用 4 章结构（assets/change-plan-template.md）
- 初始状态 - 审批状态必须为
WAITING_FOR_APPROVAL - 文件清单是白名单 - 明确列出允许修改的文件
- 验证步骤可执行 - 提供具体的验证命令
- 风险评估 - 明确标注高/中/低风险项
- 提供回滚方案 - 给出具体的回滚步骤
- 使用直观格式 - Emoji + Checkbox + 代码块
- 避免过度设计 - 不使用复杂的 ID 体系和追踪矩阵
- 人类友好 - 用人话描述，避免技术黑话
工具
- 写入工具：
scripts/write_utf8.py（确保 UTF-8 编码） - 验证工具：
scripts/validate_change_plan.py（检查方案完整性）
详细文档
assets/change-plan-template.md- 简洁方案模板references/workflow-detail.md- 详细工作流程references/report-structure.md- 报告结构说明references/quality-checklist.md- 质量检查清单
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 110 lines · 28 tokens per session scan A 9bbba6418288
code-change-plan is a skill published in the GitHub repository BeWaterMyFriend7/SKILL-PROJECT (51 stars, last pushed 3d ago), licensed Apache-2.0. It adds 28 tokens to every session and 874 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…