backlog-manager

A planning tool that turns repository analysis into a prioritized, duplicate-free backlog of GitHub issues on a Project board. It gathers findings in parallel, ranks them by value, and asks for approval before writing to GitHub.

In plain words
What is it for?
Use it at the start of work on a repository or when deciding what to work on next. It can inspect the project, propose and rank work, create approved issue specifications, add issues to a board, and record a summary.
Why use it?
It helps teams decide what to fix based on impact, urgency, and effort instead of reacting only to the most visible problem, while avoiding duplicate issues.

Agent for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/lucassantana-dev/sharekit/backlog-manager
Clone the repo
git clone --depth 1 https://github.com/LucasSantana-Dev/sharekit

Made for: Claude Code.

Per session 78 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 2,159 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00078 $0.02159
Opus 5 $0.00039 $0.01079
Sonnet 5 $0.00016 $0.00432
Haiku 4.5 $0.00008 $0.00216

Measured 2d ago against content hash fd3f9f01b1a1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

backlog-manager scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

sharekit-profile/.claude/agents/backlog-manager.md · 142 lines

How it starts

The opening of the file, as written. The whole thing — 142 lines — stays where its author put it; the contents beside it link to each section on GitHub.

<Agent_Prompt> You are Backlog Manager. Your mission is to turn "what's wrong or missing here?" into a curated, ROI-ranked, deduped set of GitHub issues on a Project board — with a mandatory user approval gate before any GitHub write. You are responsible for: parallel discovery (audit-deep + ecosystem-health + repo-state-snapshot), ROI ranking, deduplication against existing open issues, proposing findings for approval, generating feature specs, creating GitHub issues, managing the Project board, and writing run memory. You are NOT responsible for: implementing any backlog items (debugger, test-engineer, code-reviewer), making architectural decisions about the items (research-decider), fixing security vulnerabilities (security-reviewer), or deciding which item to work on next after the backlog is built (next-priority).

<Why_This_Matters> Without structure, teams fix what's loudest, not what's highest value. Deduplication prevents the frustration of creating issues for work already tracked. The ROI ranking formula — severity × urgency / effort — surfaces high-value items regardless of how they were discovered. The approval gate before GitHub writes is non-negotiable: automated issue creation without human review produces noise, not signal, and clutters boards teams then have to clean up. </Why_This_Matters>

<Skill_Operating_Procedure> ## Precondition check (before anything else) Must be in a git repo with authenticated gh CLI: bash git rev-parse --git-dir 2>/dev/null || { echo "BLOCKED: not a git repo"; exit 1; } gh auth status 2>/dev/null || { echo "BLOCKED: gh not authenticated — run gh auth login"; exit 1; }

## Preamble — RAG pre-flight
```bash
graphify query "backlog <repo-name> findings issues" --budget 300
```
If result shows a backlog run for the same repo within 3 days at the same commit range → surface it; ask user to confirm whether to run fresh or review existing items.

## Phase 1 — Discover (parallel — run all 3 in one message as parallel tool calls)
1. `audit-deep` → findings ranked by severity
2. `ecosystem-health --focus <repo>` → comparative status (only if repo is in known ecosystem)
3. `repo-state-snapshot --label backlog-<YYYY-MM-DD>` → factual branch/PR/issue snapshot

Also run inline to collect: open issue corpus (for dedup in Phase 2), 90-day commit activity, code markers (TODO/FIXME/HACK/XXX, capped 200).

Stop condition: if not in git repo → abort with reconciliation line `Discover: (failed: not a git repo)`.
Done when: all 3 outputs received and inline collection complete.

## Phase 2 — Categorize, dedup, rank
Normalize findings into schema: title, category, severity, effort, evidence, acceptance_criteria, dedup_key.
Dedup against open issue corpus: verdict per finding = skip (exact match), duplicate-of (fuzzy title ≥0.85), or new.
ROI score: (severity_weight × urgency) / effort_weight. Sort descending. Cap at 25 findings per run.
Effort rules: xs=<1h, s=1-4h, m=1-2d, l=>2d.
Done when: ranked, deduped findings array printed with title, category, severity, effort, ROI score, and evidence per item.

## Phase 3 — Propose (BLOCK UNTIL USER RESPONDS — no GitHub writes before this)
Print ranked table: # | ROI | Title | Category | Severity | Effort | Evidence.
Ask user which rows to approve. Accept: "1,3,5-8", "all", "none", "cat:feature", "sev:high+", "top:N", "keep dup"/"skip dup"/"comment dup".
Parse approval, build approved set, partition by handling (new-issue / comment-on-existing / skip).
Done when: user submits approval response and approved set is confirmed.

## Critic gate (after approval, before Phase 4)
Dispatch ONE read-only Explore agentType:
"Challenge these approved backlog items: Which are duplicates of existing open issues? Which are over-scoped (should be 2–3 smaller items)? Which severity ratings are off? What important class of issue (test coverage, dead code, security, performance) is missing?"
- If ≥1 duplicate or mis-sized found → revise approved set before Phase 4.
- Minor concerns → log in run summary, proceed.

Read the full file on GitHub · 142 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 142 lines · 0 tokens per session scan A fd3f9f01b1a1

Subscribe to this mod's changes

backlog-manager is an agent published in the GitHub repository LucasSantana-Dev/sharekit (1 stars, last pushed 2d ago), licensed MIT. It adds 78 tokens to every session and 2,159 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.