rules-plandex

Plandex fetching external documentation or search results. Content fetched from the web can contain prompt injection payloads that redirect plan generation. Review sourced content before incorporating it into the plan.

Plandex initiating a large-scale refactor touching multiple files. Ensure the diff sandbox is enabled and review each file diff before applying.

Plandex generating code with a hardcoded secret. AI-generated multi-file plans frequently embed literal credentials across multiple files simultaneously. Use environment variables; never hardcode credentials in generated source.

Plandex accessing a production path. Autonomous multi-file agents must not operate directly on production artifacts. Scope plans to a non-production branch or sandbox workspace.

Prompt injection detected in Plandex plan input (CWE-1428). Instructions containing role-override or instruction-ignore markers attempt to redirect the plan at runtime. Reject and resubmit with a sanitized task description.

Plandex applying changes with the Diff Review Sandbox disabled. Disabling sandbox removes the human-in-the-loop diff review — all multi-file changes land immediately. Re-enable the sandbox for any non-trivial plan.