Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/attilaszasz/sdd-pilot/_task-trackergit clone --depth 1 https://github.com/attilaszasz/sdd-pilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/attilaszasz/sdd-pilot/_task-tracker)<a href="https://agentmods.dev/agents/attilaszasz/sdd-pilot/_task-tracker"><img src="https://agentmods.dev/badge/agents/attilaszasz/sdd-pilot/_task-tracker.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00021 | $0.01606 |
| Opus 5 | $0.00010 | $0.00803 |
| Sonnet 5 | $0.00004 | $0.00321 |
| Haiku 4.5 | $0.00002 | $0.00161 |
Grade A, and why
TaskTracker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 122 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Task
Parse tasks.md into structured task objects with status metadata.
Inputs
Feature directory containing tasks.md.
Execution Rules
Preserve order, infer status consistently, fail closed on malformed task candidates, and return machine-readable output only.
Output Format
Return a single JSON array of parsed task objects for valid input. Return one JSON error object for invalid input.
- Read
FEATURE_DIR/tasks.md. If missing or empty → return[]. - Run
node scripts/parse-tasks.mjs "FEATURE_DIR/tasks.md"from the repository root and parse its JSON output. This parser recognizes these two accepted forms:
- Standard task:
- [ |X|x] T### [P?] [US#|OBJ#?] {(FR|TR|OR|RR)-###?} [COMPLETES req?] Description [after:T###?] [← T###:Symbol?] [→ exports: Symbol?] [VERIFY: <command>]?* - QC bug task:
- [ |X|x] T### [BUG:severity] [RECURRING?] [ESCALATED?] [DEFERRED?] {(FR|TR|OR|RR)-###?} [category?] Description - Checkbox:
[ ]=pending,[X]/[x]=completed - ID:
T### - Optional
[P]→ parallel=true - Optional
[US#]/[OBJ#]→ workItem, story, objective - Optional
[BUG:CRITICAL|ERROR|WARNING]→bugSeverity - Optional modifier tags
[RECURRING],[ESCALATED],[DEFERRED]→modifiersarray anddeferredboolean - Optional
[category]after requirement tags on bug tasks →bugCategory- Optional
{FR-###},{TR-###},{OR-###},{RR-###}(comma-separated) → requirements array - Extract
filePathfrom the task description when a path is present - Optional
[COMPLETES (FR|TR|OR|RR)-###]→completesRequirementstring (e.g."FR-003") - Optional
after:T###(comma-separated for multiple) →dependenciesarray (e.g.["T005", "T008"])- Optional
← T###:Symbol,Symbol→importsarray of{"sourceTask": "T###", "filePath": "src/example.ts", "symbols": ["Symbol"]}objects when the source task can be resolved from the parsed task list - Optional
← plan:AcceptanceTestStubs→importsentry of{"sourceTask": "plan", "filePath": null, "symbols": ["AcceptanceTestStubs"]}marking this as an acceptance test stub task; the Developer reads the## Acceptance Test Stubssection fromplan.mddirectly (no task ID to resolve,filePathstays null)
- Optional
- Optional
→ exports: Symbol(params),Symbol→exportsarray of symbol strings - Optional
[VERIFY: <command>](repeatable; zero or more) →verifyarray of command strings. The command MUST be non-empty and MUST NOT contain a literal]. Commands run from the repo root. - Remaining text (after removing parsed annotations) → description
- Optional
- Current heading → phase
- After parsing all tasks, resolve
dependenciesandimports[].filePathby matching referenced task IDs to parsed tasks in the sametasks.md
- After parsing all tasks, resolve
- Include completed tasks. Ignore non-task prose, headings, and checkbox lines whose first token is not task-like. Preserve order.
- A checkbox line with a task-like first token (
T...) is a task candidate. Invalid checkbox state,T###ID, requirement, dependency, import, export, or VERIFY annotation is a parse error, never an ignored line.
- If parser output has
valid: false, a non-emptyerrorsarray, invalid JSON, or a non-zero exit, return exactly{"tasks": [...], "parseErrors": [{"line": 12, "code": "invalid-task-id", "message": "invalid task ID T12; expected T###", "source": "- [ ] T12 ..."}]}using the parser's partial tasks and errors. Do not return a bare array or continue with partial parsing. - For valid parser output, return only its
tasksvalue as the stable single JSON array:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 122 lines · 21 tokens per session scan A a9641df360ed
TaskTracker is an agent published in the GitHub repository attilaszasz/sdd-pilot (95 stars, last pushed today), licensed MIT. It adds 21 tokens to every session and 1,606 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
performance-optimizer
Performance analysis and optimization specialist. Use PROACTIVELY for identifying bottlenecks, optimizing slow code, reducing bundle sizes, and improving runtime performance. Profiling, memory leaks, render optimization, and algorithmic improvements.
security-reviewer
Security vulnerability detection and remediation specialist. Use PROACTIVELY after writing code that handles user input, authentication, API endpoints, or sensitive data. Flags secrets, SSRF, injection, unsafe crypto, and OWASP Top 10 vulnerabilities.
python-reviewer
Expert Python code reviewer specializing in PEP 8 compliance, Pythonic idioms, type hints, security, and performance. Use for all Python code changes. MUST BE USED for Python projects.
a11y-architect
Accessibility Architect specializing in WCAG 2.2 compliance for Web and Native platforms. Use PROACTIVELY when designing UI components, establishing design systems, or auditing code for inclusive user experiences.
gan-evaluator
GAN Harness — Evaluator agent. Tests the live running application via Playwright, scores against rubric, and provides actionable feedback to the Generator.
opensource-forker
Fork any project for open-sourcing. Copies files, strips secrets and credentials (20+ patterns), replaces internal references with placeholders, generates .env.example, and cleans git history. First stage of the opensource-pipeline skill.