planning-with-files
Implements Manus-style file-based planning for complex tasks.
Skill by jd-opensource
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/jd-opensource-planning-with-files
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: research, productivity
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Python package
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/planning-with-files
What's inside
- Skill name
planning-with-files- Description
- Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls. Now with automatic session recovery after /clear.
- License
- Apache-2.0
- Instructions
- 189 lines in SKILL.md · view on GitHub
Before installing
- Ships executable scripts
Agent Skills spec issues
- allowed-tools: must be a space-separated string
Files (11)
- SKILL.md
- examples.md
- reference.md
- check-complete.ps1 · scripts/
- check-complete.sh · scripts/
- init-session.ps1 · scripts/
- init-session.sh · scripts/
- session-catchup.py · scripts/
- findings.md · templates/
- progress.md · templates/
- task_plan.md · templates/
SKILL.md (first lines)
# Planning with Files
Work like Manus: Use persistent markdown files as your "working memory on disk."
## FIRST: Check for Previous Session (v2.2.0)
**Before starting work**, check for unsynced context from a previous session:
```bash
python3 ${CLAUDE_PLUGIN_ROOT}/scripts/session-catchup.py "$(pwd)"
```
If catchup report shows unsynced context:
1. Run `git diff --stat` to see actual code changes
2. Read current planning files
3. Update planning files based on catchup + git diff
4. Then proceed with task
## Important: Where Files Go
- **Templates** are in `${CLAUDE_PLUGIN_ROOT}/templates/`
- **Your planning files** go in **your project directory**
| Location | What Goes There |
|----------|-----------------|
| Skill directory (`${CLAUDE_PLUGIN_ROOT}/`) | Templates, scripts, reference docs |
| Your project directory | `task_plan.md`, `findings.md`, `progress.md` |
## Quick Start
Before ANY complex task:
1. **Create `task_plan.md`** — Use [templates/task_plan.md](templates/task_plan.md) as reference
2. **Create `findings.md`** — Use [templates/findings.md](templates/findings.md) as reference
3. **Create `progress.md`** — Use [templates/progress.md](templates/progress.md) as reference
4. **Re-read plan before decisions** — Refreshes goals in attention window
5. **Update after each phase** — Mark complete, log errors
> **Note:** Planning files go in your project root, not the skill installation folder.
## The Core Pattern
```
Context Window = RAM (volatile, limited)
Filesystem = Disk (persistent, unlimited)
→ Anything important gets written to disk.
```
## File Purposes
| File | Purpose | When to Update |
|------|---------|----------------|
| `task_plan.md` | Phases, progress, decisions | After each phase |
| `findings.md` | Research, discoveries | After ANY discovery |
| `progress.md` | Session log, test results | Throughout session |
## Critical Rules
### 1. Create Plan First
Never start a complex task without `task_plan.md`. Non-negotiable.
### 2. The 2-Action Rule
> "After every 2 view/browser/search operations, IMMEDIATELY save key findings to text files."
This prevents visual/multimodal information from being lost.
### 3. Read Before Decide
Before major decisions, read the plan file. This keeps goals in your attention window.
### 4. Update After Act
After completing any phase:
- Mark phase status: `in_progress` → `complete`
- Log any errors encountered
- Note files created/modified
### 5. Log ALL Errors
Every error goes in the plan file. This builds knowledge and prevents repetition.
```markdown
## Errors Encountered
| Error | Attempt | Resolution |
|-------|---------|------------|
| FileNotFoundError | 1 | Created default config |
| API timeout | 2 | Added retry logic |
```
### 6. Never Repeat Failures
```
if action_failed:
next_action != same_action
```
Track what you tried. Mutate the approach.
## The 3-Strike Error Protocol
```
ATTEMPT 1: Diagnose & Fix
→ Read error carefully
→ Identify root cause
→ Apply targeted fix
ATTEMPT 2: Alternative Approach
→ Same error? Try different method
→ Different tool? Different library?
→ NEVER repeat exact same failing action
ATTEMPT 3: Broader Rethink
→ Question assumptions
→ Search for solutions
→ Consider updating the plan
AFTER 3 FAILURES: Escalate to User
→ Explain what you tried
→ Share the specific error
→ Ask for guidance
```
## Read vs Write Decision MatrixFrom jd-opensource/JoySafeter, Apache-2.0.
More from jd-opensource/JoySafeter
- 0.697score
pentest-whitebox-code-review
jd-opensource
Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-recon-attack-surface
jd-opensource
White-box attack surface mapping — correlate external scans, browser exploration, and source code into structured endpoint inventory, role architecture, and…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-secrets-exposure
jd-opensource
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-supply-chain
jd-opensource
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-mobile-app
jd-opensource
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-business-logic
jd-opensource
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-client-advanced
jd-opensource
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-config-hardening
jd-opensource
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-exploit-validation
jd-opensource
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-ai-llm-security
jd-opensource
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
SkillCFreshness: C★ 315Claude Code +9 - 0.693score
pentest-http-smuggling
jd-opensource
HTTP request smuggling, desync attacks, cache poisoning, and protocol-level vulnerability testing.
SkillCFreshness: C★ 315Claude Code +9
Signals
- Stars
- 315
- Forks
- 56
- Open issues
- 17
- Last commit (this folder)
- Feb 13, 2026 (8 months ago)
- Last release
- Jul 2, 2026 (3 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/jd-opensource/JoySafeter
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
Same skill elsewhere
Copies of this SKILL.md published by others; search shows only one of them.
More from jd-opensource
- 0.697score
pentest-config-hardening
jd-opensource
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-business-logic
jd-opensource
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-client-advanced
jd-opensource
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-ai-llm-security
jd-opensource
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-exploit-validation
jd-opensource
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
SkillCFreshness: C★ 315Claude Code +9
Cite this page
planning-with-files skill. Agent Mart. https://agentmart.dev/skills/jd-opensource-planning-with-files (last updated 2026-10-24)