Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/demodev-lab/claude-code-plugin-demokit/plan-plusnpx skills add demodev-lab/claude-code-plugin-demokit --skill plan-plusgit clone --depth 1 https://github.com/demodev-lab/claude-code-plugin-demokitWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00052 | $0.01911 |
| Opus 5 | $0.00026 | $0.00955 |
| Sonnet 5 | $0.00010 | $0.00382 |
| Haiku 4.5 | $0.00005 | $0.00191 |
Grade A, and why
plan-plus scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/plan-plus - 브레인스토밍 강화 계획
help
인자가 help이면 아래 도움말만 출력하고 실행을 중단한다:
/plan-plus — 5단계 브레인스토밍 강화 계획
사용법:
/plan-plus {feature}
/plan-plus {feature} --deep
단계:
1. Context Explore - 기존 코드/도메인 탐색 (병렬 Wave)
2. Intent Discover - 사용자 의도 + NFR 발견
3. Alternatives - 대안 도출 (--deep: Council 병렬)
4. YAGNI Review - 불필요한 기능 제거 (Adversarial)
5. Plan Generate - 최종 Plan 문서 생성 → .pdca/ 저장
플래그:
--deep Stage 3에서 spring-architect + api-expert + dba-expert
Council 병렬 토론으로 심화 대안 분석
예시:
/plan-plus user-management
/plan-plus order-payment --deep
관련 명령:
/pdca design — 다음 단계: 상세 설계
/pdca plan — 기본 계획 수립
/pipeline — 9단계 개발 파이프라인
HARD-GATE
계획 승인 전 코드 작성 금지. 5단계를 모두 완료하고 사용자 승인을 받은 후에만 구현을 시작한다.
--deep 플래그 감지
- 인자에서
--deep존재 여부를 파싱한다. --deep이 있으면deepMode = true로 설정하고, feature 이름에서--deep을 제거한다.deepMode에 따라 Stage 3의 실행 방식이 달라진다 (단독 vs Council 병렬).
보안 조건부 활성화
feature 이름에 아래 키워드가 포함되면 securityMode = true로 설정한다:
auth, authentication, login, payment, order, user-management, user, member, permission, role, admin, token, oauth, jwt
securityMode = true일 때:
- Stage 1: security-expert가 병렬 Wave에 추가된다.
- Stage 2: security-expert가 NFR 보안 항목을 보강한다.
인라인 체크포인트
각 Stage 완료 후 아래 형식으로 사용자에게 진행 상황을 보고하고, 다음 Stage 진행 여부를 확인받는다:
[Stage X/5: {단계명} 완료]
- 요약 1줄
- 요약 2줄
→ 다음 Stage로 진행할까요?
확인 질문 형식
컨벤션:
templates/shared/ask-user-convention.md참조
사용자에게 확인 질문을 할 때는 반드시 AskUserQuestion 도구를 사용한다. 줄글 질문 금지.
실행 절차
Stage 1: Context Explore (컨텍스트 탐색)
담당: spring-architect(Coordinator) + domain-expert + api-expert (병렬 Wave)
조건부: securityMode = true이면 security-expert 추가
Wave 병렬 탐색:
- spring-architect: 프로젝트 구조, 빌드 설정, 공통 패턴 분석
- domain-expert: 기존 도메인 모델, Entity 관계, 비즈니스 규칙 탐색
- api-expert: 기존 API 패턴, DTO 구조, 엔드포인트 컨벤션 분석
- security-expert (조건부): 인증/인가 구조, 보안 설정 분석
산출물: 컨텍스트 요약 (기존 도메인 목록, 사용 패턴, 기술 스택, 보안 현황)
체크포인트: [Stage 1/5: Context Explore 완료]
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 159 lines · 52 tokens per session scan A 054dd4fe9f27
plan-plus is a skill published in the GitHub repository demodev-lab/claude-code-plugin-demokit (2 stars, last pushed 6mo ago), licensed MIT. It adds 52 tokens to every session and 1,911 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
auto-perf-optimize
Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.
chat-perf
Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…