Claude Code's Plan-Skeptic Sub Agent Identifies Security Gaps in Generated Plans
How Claude Code's Plan-Skeptic Sub Agent Works
A developer with 10+ years of web agency experience discovered that Claude Code includes a plan-skeptic sub agent that can be triggered to review AI-generated development plans. When the developer rejected a plan due to security concerns, Claude Code automatically ran both the security-sheriff and plan-skeptic sub agents.
The plan-skeptic sub agent not only caught the security issues the developer had flagged, but identified additional problems that weren't initially noticed. The revised plan was significantly better after this review process.
Practical Workflow Integration
The developer now deliberately rejects plans and prompts Claude Code with: run the plan-skeptic sub agent to identify any gaps or issues before approving any generated plans. This approach has become part of their regular workflow when using Claude Code for development tasks.
The security-sheriff sub agent was previously known to the developer, but the plan-skeptic sub agent was new. Both agents work together to improve plan quality, with plan-skeptic specifically focused on identifying gaps and issues in the overall plan structure and approach.
This discovery came from reviewing a Claude Code-generated plan that felt off from a security perspective, based on the developer's experience building production applications. The gut feeling about potential security issues led to the rejection that triggered both sub agents.
📖 Read the full source: r/ClaudeAI
👀 See Also
Orc: Open Source Multi-Project Orchestrator for AI Coding Agents
Orc is an OS-level orchestrator that coordinates AI coding agents across multiple projects using bash, tmux, and git worktrees. It addresses merge conflicts, duplicated work, and coordination overhead with a two-tier review system and zero token burn on orchestration.
Claude-File-Recovery: CLI tool extracts files from Claude Code session history
claude-file-recovery is a Python CLI tool and TUI that parses JSONL session transcripts from ~/.claude/projects/ to recover files created, modified, or read by Claude Code, including point-in-time recovery of earlier file versions.
Aura Research: Local tool compiles documents into AI-navigable wiki with persistent memory
Aura Research is an open-source tool that processes raw documents (PDFs, papers, notes, code, 60+ formats) into a structured markdown wiki with backlinked articles, concept pages, and a master index. It compresses everything into a .aura archive optimized for RAG retrieval and runs 100% locally with no data leaving your machine.
Nutrition MCP Server Built with Claude Code for Food Diary Export
A developer built a nutrition MCP server using Claude Code after commercial apps blocked data export, creating a tool that logs meals via Claude, generates summaries, and exports to Excel without switching apps.