Borrowing it
Nothing to install: this file belongs to sumulige/sumulige-claude. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/sumulige/sumulige-claude/main/.claude/commands/todos.mdgit clone --depth 1 https://github.com/sumulige/sumulige-claudeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/sumulige/sumulige-claude/todos)<a href="https://agentmods.dev/commands/sumulige/sumulige-claude/todos"><img src="https://agentmods.dev/badge/commands/sumulige/sumulige-claude/todos.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00005 | $0.00484 |
| Opus 5 | $0.00003 | $0.00242 |
| Sonnet 5 | $0.00001 | $0.00097 |
| Haiku 4.5 | $0.00001 | $0.00048 |
Grade A, and why
todos scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Manage project tasks in the development/todos directory.
Show Task Overview
Display the task overview:
cat development/todos/INDEX.md
Task Operations
Create a New Task
When user asks to create a task:
- Create file in
development/todos/active/ - Use kebab-case for filename (e.g.,
user-login.md) - Use the template format:
# [Task Name]
**状态**: 🚧 进行中
**优先级**: P0/P1/P2/P3
**负责人**: AI/Human
**分支**: `feature/xxx`
**创建时间**: YYYY-MM-DD
**预计完成**: YYYY-MM-DD
## 描述
[Task description]
## 子任务
- [ ] Subtask 1
- [ ] Subtask 2
## 依赖
- [Dependencies]
## 进度
- [x] Planning
- [ ] In progress
- [ ] Testing
- [ ] Review
## 备注
[Notes]
Update Task Status
To move a task:
- Complete: Move from
active/tocompleted/ - Backlog: Move from
active/tobacklog/ - Archive: Move from
completed/toarchived/
Update Task Progress
Edit the task file and update:
- Subtask checkboxes
- Progress checklist
- Add notes
Refresh Task Index
After any task changes, refresh the index:
node .claude/hooks/todo-manager.cjs --force
Task Priority Levels
| Priority | Usage |
|---|---|
| P0 | Critical - blocks release |
| P1 | High - important for next milestone |
| P2 | Medium - normal feature work |
| P3 | Low - nice to have |
Examples
User says: "Create a task for implementing user authentication"
→ Create active/user-authentication.md
User says: "Mark the login task as complete"
→ Move active/login.md to completed/login.md
User says: "Show all active tasks"
→ List all files in development/todos/active/
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 100 lines · 5 tokens per session scan A af7ae032a8ea
todos is a command published in the GitHub repository sumulige/sumulige-claude (2 stars, last pushed 6mo ago), licensed MIT. It adds 5 tokens to every session and 484 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
migrate
Command "migrate" from ApexIQ/skillsmith, covering command: /migrate, goal, resources and execution plan.
report
generate a progress and readiness report for library click, pytest, arch-business-logic, arch-ui, arch-unknown.
ready
Command "ready" from ApexIQ/skillsmith, covering command: /ready, goal, resources and execution plan.
team-exec
Command "team-exec" from ApexIQ/skillsmith, covering command: /team-exec, goal, resources and execution plan.
plan-feature
Command "plan-feature" from ApexIQ/skillsmith, covering command: /plan-feature, goal, resources and execution plan.
swarm
Command "swarm" from ApexIQ/skillsmith, covering command: /swarm, goal, resources and execution plan.