glog-plan

Name: glog-plan
Availability: InStock
Author: Glog.AI

Generate a SARIF report and remediation plan from a glog-action security scan.

Updated Feb 16, 2026

Search Tags:#automation #planning #security #analysis #remediation #sarif #glog

Ready to run

npx skills add https://github.com/glogai/glog-skills --skill glog-plan

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: glog-plan
Source: https://github.com/glogai/glog-skills/tree/main/glog-plan
Command: npx skills add https://github.com/glogai/glog-skills --skill glog-plan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Coordinated security remediation planning for a project by running a full-project scan via glog-action to produce a SARIF report and a detailed, actionable remediation plan, all without modifying source files.

Core Features & Use Cases

Orchestrates a full-project scan using glog-action and validates the final .glog/glog-scan.sarif
Analyzes SARIF findings to generate a structured remediation plan with explicit next steps, owner notes, and manual-review guidance
Produces a standalone remediation plan document (.glog/glog-remediation-plan.md) suitable for security reviews and actionable fixes

Quick Start

Run the glog-plan workflow on the current project to generate a comprehensive remediation plan in .glog/glog-remediation-plan.md without modifying any source files.

Frequently Asked Questions about glog-plan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate a SARIF security remediation plan without modifying source code?▼

A SARIF security remediation plan is generated by running a full-project scan that analyzes findings and produces a prioritized action document, ensuring no source files are modified during the process.

What environment variables do I need to run a full-project security scan for remediation planning?▼

Running a full-project security scan requires the GLOG_CLIENT and GLOG_ENV environment variables to be configured, ensuring the scan respects environment-based configuration rules.

How does a SARIF analysis tool create a prioritized security remediation plan?▼

SARIF analysis tools create a remediation plan by validating the SARIF report, analyzing the findings, and generating a structured markdown document with explicit next steps, owner notes, and manual-review guidance.

Can I use automated security triage to plan fixes without applying them to the codebase?▼

Automated security triage can plan fixes without applying them by orchestrating a scan that outputs a standalone remediation plan document, ensuring all writes are restricted to the .glog directory.

What is the best way to coordinate security remediation across a full project?▼

The best way to coordinate full-project security remediation is to run a comprehensive scan that generates a SARIF report and translates it into an actionable, prioritized plan for security reviews.

Where does a security scan tool store the generated SARIF report and remediation plan?▼

A security scan tool stores the generated SARIF report at .glog/glog-scan.sarif and the standalone remediation plan at .glog/glog-remediation-plan.md, ensuring no writes occur outside the .glog directory.