plan-plus

A five-stage planning and brainstorming skill, with an optional deeper review involving several specialist perspectives. It is described in Korean and covers exploring context, discovering intent, comparing options, removing unnecessary work, and producing a plan.

In plain words
What is it for?
Use it to analyze requirements, explore the existing code and domain, compare approaches, review for unnecessary scope, and save the final plan in .pdca/.
Why use it?
It helps turn a feature idea into an approved plan before implementation begins. It also identifies extra security review when the feature concerns areas such as login, payments, users, roles, or tokens.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/demodev-lab/claude-code-plugin-demokit/plan-plus
Any agent
npx skills add demodev-lab/claude-code-plugin-demokit --skill plan-plus
Clone the repo
git clone --depth 1 https://github.com/demodev-lab/claude-code-plugin-demokit

Made for: Claude Code, Codex.

Per session 52 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,911 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00052 $0.01911
Opus 5 $0.00026 $0.00955
Sonnet 5 $0.00010 $0.00382
Haiku 4.5 $0.00005 $0.00191

Measured 2d ago against content hash 054dd4fe9f27, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

plan-plus scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/plan-plus/SKILL.md · 159 lines

How it starts

The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/plan-plus - 브레인스토밍 강화 계획

help

인자가 help이면 아래 도움말만 출력하고 실행을 중단한다:

/plan-plus — 5단계 브레인스토밍 강화 계획

사용법:
  /plan-plus {feature}
  /plan-plus {feature} --deep

단계:
  1. Context Explore   - 기존 코드/도메인 탐색 (병렬 Wave)
  2. Intent Discover   - 사용자 의도 + NFR 발견
  3. Alternatives      - 대안 도출 (--deep: Council 병렬)
  4. YAGNI Review      - 불필요한 기능 제거 (Adversarial)
  5. Plan Generate     - 최종 Plan 문서 생성 → .pdca/ 저장

플래그:
  --deep  Stage 3에서 spring-architect + api-expert + dba-expert
          Council 병렬 토론으로 심화 대안 분석

예시:
  /plan-plus user-management
  /plan-plus order-payment --deep

관련 명령:
  /pdca design — 다음 단계: 상세 설계
  /pdca plan   — 기본 계획 수립
  /pipeline    — 9단계 개발 파이프라인

HARD-GATE

계획 승인 전 코드 작성 금지. 5단계를 모두 완료하고 사용자 승인을 받은 후에만 구현을 시작한다.

--deep 플래그 감지

  1. 인자에서 --deep 존재 여부를 파싱한다.
  2. --deep이 있으면 deepMode = true로 설정하고, feature 이름에서 --deep을 제거한다.
  3. deepMode에 따라 Stage 3의 실행 방식이 달라진다 (단독 vs Council 병렬).

보안 조건부 활성화

feature 이름에 아래 키워드가 포함되면 securityMode = true로 설정한다: auth, authentication, login, payment, order, user-management, user, member, permission, role, admin, token, oauth, jwt

securityMode = true일 때:

  • Stage 1: security-expert가 병렬 Wave에 추가된다.
  • Stage 2: security-expert가 NFR 보안 항목을 보강한다.

인라인 체크포인트

각 Stage 완료 후 아래 형식으로 사용자에게 진행 상황을 보고하고, 다음 Stage 진행 여부를 확인받는다:

[Stage X/5: {단계명} 완료]
- 요약 1줄
- 요약 2줄
→ 다음 Stage로 진행할까요?

확인 질문 형식

컨벤션: templates/shared/ask-user-convention.md 참조

사용자에게 확인 질문을 할 때는 반드시 AskUserQuestion 도구를 사용한다. 줄글 질문 금지.

실행 절차

Stage 1: Context Explore (컨텍스트 탐색)

담당: spring-architect(Coordinator) + domain-expert + api-expert (병렬 Wave) 조건부: securityMode = true이면 security-expert 추가

Wave 병렬 탐색:

  • spring-architect: 프로젝트 구조, 빌드 설정, 공통 패턴 분석
  • domain-expert: 기존 도메인 모델, Entity 관계, 비즈니스 규칙 탐색
  • api-expert: 기존 API 패턴, DTO 구조, 엔드포인트 컨벤션 분석
  • security-expert (조건부): 인증/인가 구조, 보안 설정 분석

산출물: 컨텍스트 요약 (기존 도메인 목록, 사용 패턴, 기술 스택, 보안 현황)

체크포인트: [Stage 1/5: Context Explore 완료]

Read the full file on GitHub · 159 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 159 lines · 52 tokens per session scan A 054dd4fe9f27

Subscribe to this mod's changes

plan-plus is a skill published in the GitHub repository demodev-lab/claude-code-plugin-demokit (2 stars, last pushed 6mo ago), licensed MIT. It adds 52 tokens to every session and 1,911 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

brainstorming

You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.

obra/superpowers · 37 tokens

auto-perf-optimize

Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.

microsoft/vscode · 62 tokens

chat-perf

Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.

microsoft/vscode · 51 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens