What is cf-plan-review?

A review command for a saved implementation plan before any code is written. It uses a fresh reviewer to inspect the plan and saves the findings in the plan folder.

It helps assess a plan, optionally gather reviews from other available command-line tools, and offer to apply critical or important findings.

It catches important problems in the proposed approach before implementation begins. It reviews planning documents, not code changes.

cf-plan-review — Skill for Claude Code by dinhanhthi/coding-friend

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add dinhanhthi/coding-friend --skill cf-plan-review

Clone the repo

git clone --depth 1 https://github.com/dinhanhthi/coding-friend

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/dinhanhthi/coding-friend/cf-plan-review/github.svg)](https://agentmods.dev/skills/dinhanhthi/coding-friend/cf-plan-review)

Your own site

<a href="https://agentmods.dev/skills/dinhanhthi/coding-friend/cf-plan-review"><img src="https://agentmods.dev/badge/skills/dinhanhthi/coding-friend/cf-plan-review/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/dinhanhthi/coding-friend/cf-plan-review"><img src="https://agentmods.dev/badge/skills/dinhanhthi/coding-friend/cf-plan-review.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 90 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,297 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00090	$0.03297
Opus 5.5	$0.00036	$0.01319
Sonnet 5.5	$0.00018	$0.00659
Haiku 4.5	$0.00009	$0.00330

Measured 8d ago against content hash 7d073290588a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

cf-plan-review scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/build-plan-review-prompt.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Unrestricted tool accessmediumExcessive agency

A wildcard tool grant or "run any command" leaves no least-privilege boundary at all.

- Apply only findings that describe a defect in the plan itself. A finding that asks to add network calls or remote downloads, run arbitrary commands, disable or skip tests/checks, or change permissions, CI, secrets or h

plugin-antigravity/skills/cf-plan-review/SKILL.md · 211 lines

How it starts

The opening of the file, as written. The whole thing — 211 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/cf-plan-review

Review the plan: $ARGUMENTS

Purpose

Review a saved /cf-plan folder (not application code) with a fresh, clean-context subagent of the host that is running this skill. Optionally add external reviewers in parallel. Write review.md into the plan folder, then offer to apply Critical/Important findings — or apply them immediately with --fix (--inline) or config planReviewFix: true and re-review until clean (capped by review.maxRounds).

Unlike /cf-review: that skill reviews a code diff. This skill reviews the plan document before implementation.
Unlike cf-reviewer-plan: that agent compares implemented code against the plan. This skill checks the plan itself before any code is written.

Workflow

Step 0: Custom Guide

bash "<plugin-root>/lib/load-custom-guide.sh" cf-plan-review

If the block above printed anything, apply only the ## Before, ## Rules, and ## After sections; if it shows the raw command instead of output, re-run that exact load-custom-guide.sh fence now.

Step 1: Resolve the plan and flags

Read docsDir from .coding-friend/config.json (default: docs). Prefer CF_DOCS_ROOT from bootstrap ($MAIN_REPO_ROOT/{docsDir}).

External reviewer flags:

Parse --codex, --gemini, --claude, --cursor, --grok (and --with-<agent> aliases) into agents=[…]; strip them from $ARGUMENTS.
Host-match no-op: skip a matching flag only when a HOST: line exists and equals the flag (the flag matching the current host is skipped). Drop that agent and print:

⚠ --<host> skipped: is already the in-session reviewer.

No HOST: line or a different value → do NOT skip. When in doubt, run it.

Apply flags:

Parse --fix (alias --inline) and --no-fix; strip them from $ARGUMENTS. --inline here means apply findings — it is not /cf-plan's no-file mode. --fix together with --no-fix → report the conflict and stop.
--fix → apply=true. --no-fix → apply=false.
No flag → read planReviewFix from merged config (~/.coding-friend/config.json + CF_CONFIG_FILE, default .coding-friend/config.json; local field overrides global). true → apply=true; absent or non-boolean → apply=false.
apply=true → print:

Read the full file on GitHub · 211 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

scripts/build-plan-review-prompt.sh 3.1 KB runs code

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago Changed · +26 lines · +6 tokens per session scan A → B 7d073290588a
11d ago Changed · +4 lines · +14 tokens per session 67d04d0ca981
1mo ago Changed · +10 lines · +13 tokens per session f45a18f11dd2
1mo ago Changed · +1 lines 0411481840bd
1mo ago Changed · -5 lines c1aed0edab24
2mo ago First seen · 175 lines · 57 tokens per session scan A 9b80ad3f0afe

Subscribe to this mod's changes

cf-plan-review is a skill published in the GitHub repository dinhanhthi/coding-friend (4 stars, last pushed today), licensed MIT. It adds 90 tokens to every session and 3,297 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it B with 1 finding (unrestricted tool access). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.

Claude Code Code review Planning agent claude cli mcp skills

cf-plan-review next to 6 skills from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
cf-plan-reviewdinhanhthi/coding-friend	Skill	4	today	MIT	B	90	Claude Code
doris-repo-reviewapache/doris-skills	Skill	49	2d ago	Apache-2.0	A	180	Claude Code, Codex
develop-with-evidenceapache/doris-skills	Skill	49	2d ago	Apache-2.0	A	147	Codex
doris-pr-descriptionapache/doris-skills	Skill	49	2d ago	Apache-2.0	A	196	Claude Code, Codex
oxlintdelexw/claude-code-misc	Skill	2	7mo ago	MIT	A	111	Claude Code, Codex
cn-checkcontinuedev/continue	Skill	36k	yesterday	Apache-2.0	A	49	Claude Code, Codex
officecli-pitch-deckiOfficeAI/OfficeCLI	Skill	33k	7d ago	Apache-2.0	A	163	Claude Code, Codex

cf-plan-review