Claude Code's Plan-Skeptic Sub Agent Identifies Security Gaps in Generated Plans
How Claude Code's Plan-Skeptic Sub Agent Works
A developer with 10+ years of web agency experience discovered that Claude Code includes a plan-skeptic sub agent that can be triggered to review AI-generated development plans. When the developer rejected a plan due to security concerns, Claude Code automatically ran both the security-sheriff and plan-skeptic sub agents.
The plan-skeptic sub agent not only caught the security issues the developer had flagged, but identified additional problems that weren't initially noticed. The revised plan was significantly better after this review process.
Practical Workflow Integration
The developer now deliberately rejects plans and prompts Claude Code with: run the plan-skeptic sub agent to identify any gaps or issues before approving any generated plans. This approach has become part of their regular workflow when using Claude Code for development tasks.
The security-sheriff sub agent was previously known to the developer, but the plan-skeptic sub agent was new. Both agents work together to improve plan quality, with plan-skeptic specifically focused on identifying gaps and issues in the overall plan structure and approach.
This discovery came from reviewing a Claude Code-generated plan that felt off from a security perspective, based on the developer's experience building production applications. The gut feeling about potential security issues led to the rejection that triggered both sub agents.
📖 Read the full source: r/ClaudeAI
👀 See Also
Qwen 3.6 27B Quantization Benchmark: Q4_K_M Beats Q8_0 on Practical Tradeoffs
Evaluated Qwen 3.6 27B across BF16, Q4_K_M, and Q8_0 GGUF quants on HumanEval, HellaSwag, and BFCL. Q4_K_M delivers near-BF16 scores with 48% less RAM, 1.45x speed, and 68.8% smaller file size.
OpenClaw memory fix tool addresses performance degradation
A new slash command called /claw_memory_fix helps clean up OpenClaw memory files when the agent forgets credentials or permissions. The tool implements techniques from Alibaba, GitHub engineering, MemGPT, and January 2026 research on memory management.
Delimit Governance Layer for Multi-Agent AI Development
Delimit is an open-source governance layer that coordinates multiple AI coding agents to prevent conflicts. It provides shared memory, collision detection, and audit tracking for agents like Claude Code, Codex, and Gemini.
Marmy: A Self-Hosted Mobile App for Managing Multiple AI Coding Agent Sessions
Marmy is an open-source, self-hosted tool built with Claude Code that lets you manage multiple AI coding agent sessions from your phone. It features a Rust agent for your machines, an iOS app, file browsing with syntax highlighting, push notifications, and a manager-agent architecture.