
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
open-plan-annotator
Advanced tools
Fully local plugin for interactive plan annotation from your Agentic assistants
A fully local agentic coding plugin that intercepts plan mode and opens an annotation UI in your browser. Mark up the plan, send structured feedback to the agent, and receive a revised version — iterate as many times as you need until you're ready to approve.
Select text to strikethrough, replace, insert, or comment — then approve the plan or request changes
Everything runs locally.

open-plan-annotator is package-managed as a plugin within your harness of choice. The main plugin package then installs the specific local platform runtime it needs for your host (linux/darwin, x86_64/arm64, etc). After installing the plugin, your agent will call open-plan-annotator autonomously when you ask it to "make a plan" or any similar such comment, including in claude-code specifically as a hook when exiting PlanMode. Alternatively, you can call it yourself explicitly via the exposed command. See below for more details.
Install from inside Claude Code:
/plugin marketplace add ndom91/open-plan-annotator
/plugin install open-plan-annotator@ndom91-open-plan-annotator
What you get:
ExitPlanMode hook: opens the annotation UI whenever Claude submits a plan/annotate-plan [task description]: asks Claude to draft a plan and send it to the UIopen-plan-annotator: runtime command invoked by the hookThird-party marketplace auto-update is disabled by default in Claude Code. Enable auto-update for the ndom91-open-plan-annotator marketplace in the Marketplace UI if you want updates automatically.
Add the plugin to your OpenCode config (opencode.json or .opencode/config.json):
{
"plugin": ["open-plan-annotator@1.8.7"]
}
What you get:
annotate_plan: tool the agent calls after drafting a markdown planopen-plan-annotator: runtime command spawned by the pluginRestart OpenCode after installing or updating so it reloads the package-managed runtime.
Install the Pi extension:
pi install npm:@open-plan-annotator/pi-extension
What you get:
annotate_plan: tool the agent calls after drafting a markdown plan/annotate-plan [plan markdown]: command for manually reviewing supplied text or the latest assistant messageopen-plan-annotator: runtime command used by the extensionManual review examples:
/annotate-plan
/annotate-plan # Plan\n\n1. Do the thing
Install globally if you want to run the CLI directly:
bun add -g open-plan-annotator
npm install -g open-plan-annotator
This adds the open-plan-annotator command. To verify the resolved runtime:
open-plan-annotator doctor
You can also review a Markdown plan directly from disk, which is useful for agents without a native plugin:
open-plan-annotator review /absolute/path/to/plan.md
The command opens the same local review UI and blocks until approval or requested changes. It prints review result JSON to stdout when the user is done.
Generic agent setup instructions are available with:
open-plan-annotator agent-setup
open-plan-annotator help agent
/plugin -> "Installed" -> open-plan-annotator entry and select "Update", then restart Claude Code.opencode.jsonc plugins open-plan-annotator entry, then restart OpenCode.open-plan-annotator.| Action | Shortcut | Description |
|---|---|---|
| Delete | d | Strikethrough selected text |
| Replace | r | Replace selected text with new content |
| Insert | s | Insert text after the selection |
| Comment | c | Attach a comment to selected text |
| Approve | Cmd+Enter | Approve the plan and proceed |
| Request Changes | Cmd+Shift+Enter | Send annotations back to the agent |
bun run dev
Starts the Bun server on port 3847 with a test plan and the Vite dev server on port 5173 with HMR.
bun run lint # check
bun run lint:fix # auto-fix
bun run format # format
docs/architecture.mddocs/operations.mddocs/release.mdMIT
FAQs
Fully local plugin for interactive plan annotation from your Agentic assistants
We found that open-plan-annotator demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.