review-plan

Review implementation plans for security vulnerabilities and architectural risks.

12|1|Updated Feb 9, 2026

Search Tags:#architecture #security #threat modeling #risk assessment #plan review #pre-code security

Ready to run

npx skills add https://github.com/florianbuetow/claude-code --skill review-plan-florianbuetow

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: review-plan
Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/review-plan
Command: npx skills add https://github.com/florianbuetow/claude-code --skill review-plan-florianbuetow

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies security gaps, implicit trust assumptions, and architectural risks in implementation plans before any code is written, making security fixes significantly cheaper and more effective.

Core Features & Use Cases

Proactive Security Auditing: Analyzes plans for vulnerabilities at the design stage.
Cost-Effective Fixes: Catches issues when they are cheapest to resolve.
Use Case: Before starting development on a new user authentication module, use this skill to review the implementation plan and ensure all security considerations like authorization, data handling, and trust boundaries are adequately addressed.

Quick Start

Review the current implementation plan for security issues.

Frequently Asked Questions about review-plan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I review an implementation plan for security vulnerabilities before coding?▼

To review an implementation plan for security vulnerabilities, analyze the proposed design for implicit trust assumptions and architectural risks. Pre-code security plan review identifies missing threat considerations, making fixes significantly cheaper and more effective before development begins.

What is STRIDE threat modeling and when should I use it for architecture risk assessment?▼

STRIDE threat modeling is a structured framework for identifying security threats like spoofing, tampering, and elevation of privilege. Use it during architecture risk assessment when evaluating complex implementation plans that require deep expert analysis of potential attack vectors.

Can I run a quick security check on a user authentication module plan?▼

Yes, you can run a quick security check on a user authentication module plan. Pre-code security auditing supports various depth levels from quick checks to deep expert analysis, ensuring authorization, data handling, and trust boundaries are adequately addressed.

What is the best way to identify implicit trust assumptions in a software design?▼

The best way to identify implicit trust assumptions in a software design is through proactive security auditing at the design stage. Reviewing implementation plans before code development begins uncovers missing threat considerations and potential architectural vulnerabilities.

Does plan review work for attack tree sketching during pre-code security analysis?▼

Yes, plan review works for attack tree sketching during pre-code security analysis. Deep expert analysis mode supports sketching attack trees and performing STRIDE modeling to thoroughly map out potential vulnerabilities in proposed architectural designs.