Claude Code's Plan-Skeptic Sub Agent Identifies Security Gaps in Generated Plans
How Claude Code's Plan-Skeptic Sub Agent Works
A developer with 10+ years of web agency experience discovered that Claude Code includes a plan-skeptic sub agent that can be triggered to review AI-generated development plans. When the developer rejected a plan due to security concerns, Claude Code automatically ran both the security-sheriff and plan-skeptic sub agents.
The plan-skeptic sub agent not only caught the security issues the developer had flagged, but identified additional problems that weren't initially noticed. The revised plan was significantly better after this review process.
Practical Workflow Integration
The developer now deliberately rejects plans and prompts Claude Code with: run the plan-skeptic sub agent to identify any gaps or issues before approving any generated plans. This approach has become part of their regular workflow when using Claude Code for development tasks.
The security-sheriff sub agent was previously known to the developer, but the plan-skeptic sub agent was new. Both agents work together to improve plan quality, with plan-skeptic specifically focused on identifying gaps and issues in the overall plan structure and approach.
This discovery came from reviewing a Claude Code-generated plan that felt off from a security perspective, based on the developer's experience building production applications. The gut feeling about potential security issues led to the rejection that triggered both sub agents.
📖 Read the full source: r/ClaudeAI
👀 See Also
Sentrial: Production Monitoring for AI Agents
Sentrial is a monitoring tool that automatically detects failure patterns in AI products including loops, hallucinations, tool misuse, and user frustrations. It diagnoses root causes by analyzing conversation patterns, model outputs, and tool interactions.
Qwen 3.6 27B hits 2.5x speed with MTP speculative decoding on llama.cpp
A Reddit user reports 2.5x faster inference on Qwen 3.6 27B using MTP speculative decoding with a custom llama.cpp PR, achieving 28 tok/s on Mac M2 Max 96GB. Includes pre-converted GGUF quants and fixed chat templates.
Auto-co: A 50-Line Bash Script That Turns Claude Code Into Autonomous AI Companies
Auto-co is a 50-line bash script that wraps the Claude Code CLI in a loop, allowing it to run autonomously with 14 AI agents playing roles like CEO, engineer, and critic. It has built four products from scratch, including FormReply and Changelog.dev, at a total cost of $268 across 270+ cycles.
Architor: Open-Source Tool for Phase-Gated Architecture Workflows with Claude Code
Architor is an open-source tool that structures Claude Code into a phase-gated architecture assistant with persistent design memory. It organizes system design into requirement evaluation, architecture decisions, component design, and validation phases, tracking decisions in an .arch workspace.