planner
An agent skill by digitalocean-labs, from digitalocean-labs/do-app-platform-skills. Tags: deployment, digitalocean, planning, project-management, strategy.
What it does
Generate staged project plans from design through deployment. Use when planning App Platform projects, breaking complex deployments into resumable stages, or tracking multi-step infrastructure setup.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add digitalocean-labs/do-app-platform-skills --skill planner
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/digitalocean-labs/do-app-platform-skills
cp -r do-app-platform-skills/skills/planner ~/.claude/skills/planner
Safety box score
Grade C, moderate risk: 44 of 100 risk points, rated 2026-09-26. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a planning/deployment helper that creates staged `Plan/` artifacts and tells the agent to validate builds with `doctl app dev build`, Docker, and sometimes `git push`/GitHub Actions. The main risks are secret handling (`.env.secrets`), remote network activity during build/deploy validation, and the ability to trigger deployments by pushing code.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It instructs the agent to run real commands such as `doctl app dev build`, `docker info`, `curl http://localhost:PORT/health`, and `git push`, which is bounded but still active shell execution. |
| Network access | 2 (moderate) | The workflow contacts remote services via `doctl app dev build --app <APP_ID>` and can trigger GitHub Actions deployments with `git push`, so code and build context may leave the machine. |
| Filesystem reach | 2 (moderate) | It creates and updates project files like `Plan/`, `.do/dev-config.yaml`, and `.env.secrets`, and reads `.do/app.yaml`/`.env.local`; this is mostly project-scoped but includes sensitive local artifacts. |
| Secrets & credentials | 3 (high) | The skill explicitly says captured values such as IDs, passwords, and URLs go into `.env.secrets` and that AI assistants read it to resume, so it intentionally handles credential-bearing files. |
| Privilege & persistence | 0 (none) | There is no use of `sudo`, global installs, system services, shell startup edits, or other privilege changes in the files provided. |
| Instruction hijack surface | 0 (none) | I found no instructions to ignore higher-priority rules, follow hidden remote content, or otherwise manipulate the agent’s instruction hierarchy. |
| Irreversible actions | 2 (moderate) | For Tier 3, it says deployment must happen via `git push` and GitHub Actions, which can initiate a production deploy once pushed, though a human still performs the push. |
| Transparency | 0 (none) | The reviewed files are plain markdown with visible commands and no binaries, encoded blobs, or dynamically fetched hidden code. |
Before installing
- Read `reference/artifact-storage.md` and decide whether you want the agent to access `.env.secrets` at all.
- Confirm you are comfortable with `git push` potentially triggering a GitHub Actions deployment for Tier 3 plans.
- Test `doctl app dev build` in a scratch repo first, with no real secrets in `.env.local` or `.env.secrets`.
- Verify Docker and doctl are already installed; this skill assumes local build tooling is available.
Rated 2026-09-26 by an automated review of 4 files from the skill's repository.
Source
- Repository
- digitalocean-labs/do-app-platform-skills (all skills from this repository)
- Path
- skills/planner/SKILL.md
- Branch
- main
- Collection
- do-app-platform
- Updated
- 2026-09-21
Related skills
- wayfinder — Plan a huge chunk of work (more than one agent session can hold) as a shared map of decision tickets on your issue tracker.
- app-platform-migration — Migrate applications from Heroku, AWS, Render, Railway, Fly.io, or Docker Compose to DigitalOcean App Platform. Use when converting existing apps.
- app-platform-router — Routes DigitalOcean App Platform tasks to specialized sub-skills.
- deployment — Deploy applications to DigitalOcean App Platform via GitHub Actions with proper environment management and secrets handling.
- co-marketing — When the user wants to find co-marketing partners, plan joint campaigns, or brainstorm partnership opportunities.
- create-learning-path — Build a personalized learning roadmap with milestones and practice checkpoints