Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TashanGKD/tashan-cursor-skills --skill remediation-plannergit clone --depth 1 https://github.com/TashanGKD/tashan-cursor-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tashangkd/tashan-cursor-skills/remediation-planner)<a href="https://agentmods.dev/skills/tashangkd/tashan-cursor-skills/remediation-planner"><img src="https://agentmods.dev/badge/skills/tashangkd/tashan-cursor-skills/remediation-planner/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tashangkd/tashan-cursor-skills/remediation-planner"><img src="https://agentmods.dev/badge/skills/tashangkd/tashan-cursor-skills/remediation-planner.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00094 | $0.00991 |
| Opus 5 | $0.00047 | $0.00495 |
| Sonnet 5 | $0.00019 | $0.00198 |
| Haiku 4.5 | $0.00009 | $0.00099 |
Grade A, and why
remediation-planner scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
整改计划制定(remediation-planner)
把分析结论变成可执行、可验证的行动计划。 没有验收标准的计划不算计划。 基于 closure-orchestration-package 的 remediation-planner-verifier 本地化。
激活后立即执行
Step 1 读取输入
需要:
- 差距报告 / 审核报告 / 发现清单(来自 architecture-gap-mapper / verifier / arch-destroyer 等)
- 约束条件(时间/资源/技术限制)
- 现有真源文档或代码结构
Step 2 按依赖和严重度分组
【P0 阻断级】不处理会导致系统无法正常运行
【P1 重要级】影响核心功能或重大风险
【P2 优化级】改善体验或减少技术债
同时识别依赖关系:哪些问题必须先解决,才能处理其他问题
Step 3 拆解为最小安全步骤
每个步骤必须:
- 有明确的负责角色(哪个 Skill/Role 执行)
- 有明确的写入范围(allowed_write_set)
- 有明确的完成判断标准(done_criteria)
- 不能一步改超过 3 个独立的模块
Step 4 为每个步骤配对验证方法
每个整改步骤必须对应一个验证步骤:
- 文档修改 → 读者能否按文档走通?
- 代码修改 → 测试是否通过?
- 架构调整 → gap-mapper 能否确认差距已消除?
Step 5 标注 branch 结构建议
输出建议的 branch 划分(供 project-retrospective 参考):
- 哪些步骤可以并行(互不影响的独立 branch)
- 哪些步骤必须串行(有依赖的 branch)
Step 6 输出整改计划文档
写入:[相关目录]/remediation-plan-YYYYMMDD.md
输出格式
# 整改计划
**制定日期**:YYYY-MM-DD
**输入来源**:[差距报告/审核报告名称]
**约束条件**:[时间/资源/技术]
## P0 阻断级整改(必须优先处理)
### P0-01 [整改项名称]
- **问题**:[描述]
- **负责**:[Skill/Role]
- **写入范围**:[文件列表]
- **完成标准**:[可验证条件]
- **验证方法**:[如何验证已修复]
- **依赖**:[必须在此之前完成的项目]
## P1 重要级整改
[同上格式]
## P2 优化级整改
[同上格式]
## 建议 Branch 结构
并行 branch: branch-A: [P0-01 + P0-02](无依赖关系) branch-B: [P1-01](与A无交叉)
串行 branch: branch-C: P0-03(依赖 branch-A 完成)
## 验收总清单
所有 P0/P1 项通过验证后,整改才算完成。
注意事项
- 没有验证标准的步骤不写入计划:每步必须配验证方法
- 最小步骤原则:一步只做一件事,方便单独验证和回滚
- branch 边界清晰:并行的步骤不能写同一真源
变更记录
v1.0 — 2026-03-19 — 初始创建
根因:审核/分析类 Skill(verifier/arch-destroyer/architecture-gap-mapper)产出发现报告后,缺乏一个专门将发现转化为可执行计划的 Skill。基于外部包 remediation-planner-verifier 本地化,加入 branch 结构建议。
验证状态:🔵 待验证
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 115 lines · 94 tokens per session scan A 1809ffee9997
remediation-planner is a skill published in the GitHub repository TashanGKD/tashan-cursor-skills (20 stars, last pushed 5mo ago), licensed MIT. It adds 94 tokens to every session and 991 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
team
Coordinate parallel work across multiple Cursor sessions via shared .omc/team/ state.
template-helpers
Catalog of the reusable building blocks shipped with this Android template — BaseActivity/BaseFragment, the helpers/ extension files (navigation, lifecycle, toast, snackbar, dialogs, images, permissions, theme, locale, settings intents, date, delay), common/ (Firebase, network, observers), and…
android-feature
Workflow for implementing a new Android feature, screen, fragment, activity, dialog, adapter, or enhancement in this XML/MVVM template. Use whenever the user asks to add, build, implement, or extend functionality — before writing any code. Covers planning, the MVVM/MVI skeleton, the Android configuration checklist…
android-new-project
Workflow for turning a fresh copy of this Android template into a new app — renaming the package/namespace/applicationId, branding (icons, splash, palette, fonts), Firebase setup, signing config, stripping unused sample screens, and verifying the foundation. Use when the user says they are starting a new app…
android-preflight
Final verification checklist to run before declaring Android work finished — build, both themes, string resources, lifecycle and leak risks, registered permissions and components, resource parity between values and values-night, and honest reporting of what was and was not verified. Use at the end of any feature, fix…
android-upgrade
Workflow for changing an existing working Android project — upgrading dependencies, AGP/Gradle or SDK levels, migrating deprecated APIs, refactoring, and fixing bugs, without breaking what already works. Covers baseline verification, scoping the diff, targetSdk behaviour changes, SharedPreferences/Room data…