github-sync

A two-way link between project epics and tasks and GitHub issues. An epic is a large piece of planned work, while tasks are the smaller jobs needed to complete it.

In plain words
What is it for?
Use it to create labelled epic and task issues, add acceptance checklists, connect tasks to their parent epic, post progress updates, and close issues when work is complete.
Why use it?
It keeps planning and GitHub tracking aligned, so progress does not have to be copied manually between project documents and issues. It also preserves parent-and-child relationships and task states.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/a5c-ai/babysitter/github-sync
Any agent
npx skills add a5c-ai/babysitter --skill github-sync
Clone the repo
git clone --depth 1 https://github.com/a5c-ai/babysitter

Made for: Claude Code, Codex.

Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 328 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00328
Opus 5 $0.00000 $0.00164
Sonnet 5 $0.00000 $0.00066
Haiku 4.5 $0.00000 $0.00033

Measured 2d ago against content hash 82cf28f56342, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

github-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

library/methodologies/ccpm/skills/github-sync/SKILL.md · 45 lines

What it actually says

GitHub Sync

Bidirectional synchronization of epics and tasks with GitHub issues, labels, and relationships.

Agent

Project Tracker - project-tracker

Workflow

  1. Create epic issue with epic and ccpm labels
  2. Create task issues linked to epic with stream-type labels
  3. Add acceptance criteria as checkboxes in issue body
  4. Set issue relationships (parent/child)
  5. Sync progress updates as issue comments
  6. Close issues when tasks complete
  7. Maintain bidirectional sync state

Inputs

  • githubRepo - GitHub repository (owner/repo)
  • featureName - Feature identifier
  • epic - Epic document
  • tasks - Task list from decomposition

Outputs

  • Epic issue number
  • Task issue numbers with ID mapping
  • Labels applied
  • Sync status report

Issue States

open -> in-progress -> blocked -> review -> closed

Process Files

  • ccpm-orchestrator.js - Phase 4 of full lifecycle
  • ccpm-parallel-execution.js - Progress sync during execution
  • ccpm-tracking.js - Tracking data sync
Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 45 lines · 0 tokens per session scan A 82cf28f56342

Subscribe to this mod's changes

github-sync is a skill published in the GitHub repository a5c-ai/babysitter (1,757 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 328 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.