Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BuildrAI/Buildr --skill task-worktreegit clone --depth 1 https://github.com/BuildrAI/BuildrWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/buildrai/buildr/task-worktree)<a href="https://agentmods.dev/skills/buildrai/buildr/task-worktree"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/task-worktree/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/buildrai/buildr/task-worktree"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/task-worktree.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00048 | $0.02302 |
| Opus 5.5 | $0.00019 | $0.00921 |
| Sonnet 5.5 | $0.00010 | $0.00460 |
| Haiku 4.5 | $0.00005 | $0.00230 |
Grade A, and why
task-worktree scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Task Worktree Skill
本 Skill 是 buildr.git-worktree-provider/v1 的默认 provider,只管理Git checkout、本地任务分支、窄Git evidence和具体删除安全。执行位置选择遵循任务分流的默认隔离策略;本技能(Skill)承接创建、复用检查与清理,不自行放宽主开发分支写入例外。
本技能(Skill)只承接实际 Git 对象的位置动作。已确认的非 Git 资料按任务分流在已授权、已核对的实际位置由所属专业能力维护,不调用本提供者(Provider);身份未明或已登记仓库缺失不能作为该分支,也不能要求本提供者伪造非 Git 工作树证据。混合范围分别处理,现有 Git 身份、绑定和删除安全保持有效。
公共动作
buildr worktree create <task-id> --target <canonical-workspace> --branch <branch> --start-point <ref> [--include <selector>] --json
buildr worktree inspect <task-id> --target <canonical-workspace> [--observed-checkouts <json-file>] --json
buildr worktree cleanup <task-id> --target <canonical-workspace> --expected-source <selector>=<full-commit> --delivered-ref <selector>=<full-commit> [...] [--observed-checkouts <json-file>] --json
新建 root 固定为 <workspace-root>/.worktrees/<task-id>;独立 Project/Service repository 放在其 canonical nested source path。不得静默回退到 /tmp。
总目录已确认非 Git、其中存在明确登记的独立代码库(Repository)时,显式选择实际参与的项目(Project)或服务(Service),仅在各自规范来源层级创建工作树(Worktree);共享同一来源去重,不初始化总目录 Git,不自动纳入其他代码库(Repository)。资料继续在真实位置维护,不复制进检出目录。来源缺失、损坏或 Git 身份未知不能当作非 Git;只选择健康来源的隔离按自身事实继续。仅子代码库(Repository)的组目录不是完整工作空间(Workspace),依赖完整根的开发预览(Preview)仍按自身范围判断。
任务分流已确认原型(Prototype)源码位置属于同一目标时,以其稳定隔离标识执行 inspect,复用返回的实际路径和分支(Branch),保留未提交成果;原型到正式开发不构成重新创建或要求工作目录干净的理由。正式任务登记仍由 task-manager 负责,原型存在或提供者证据不证明正式任务已登记;归属冲突继续按现有停止条件处理。
新选择的任务标识(Task ID)默认使用简短、稳定的语义名称,不主动添加日期;已有任务标识(Task ID)及用户指定的合法名称继续沿用,不截去日期或自动重命名。同名但不同的任务先核对归属,再用简短语义后缀区分,不复用他人位置。OpenSpec 归档日期只属于归档目录,不改变工作树(Worktree)或分支名称,也不替代交付核验和清理条件。
同一任务涉及多个代码库(Repository)时,沿用同一任务标识(Task ID)作为工作树(Worktree)组的统一名称,不为每个代码库(Repository)另起任务标识(Task ID)。创建时各代码库(Repository)使用同一次任务计划已明确的分支(Branch)名称;实际检出目录(Checkout Path)仍保留登记源的规范相对层级,如 <workspace-root>/.worktrees/<task-id>/<sourcePath>,不把每个检出目录(Checkout Path)的末级名称改为任务标识(Task ID)。跨库关联由任务标识(Task ID)及已核对的提供者证据(Provider Evidence)确定,不能仅凭目录或分支(Branch)名称建立。接续已有外部工作树(Worktree)时保留已核对的实际路径与分支(Branch),不为统一名称自动迁移或重命名。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +10 lines 3e560dab60c0
- 5d ago Changed 568350939720
- 9d ago Changed · +10 lines d5e904e104e6
- 25d ago Changed · +25 lines 216245ca5b48
- 1mo ago Changed · +8 tokens per session 8a7eddf2d038
- 1mo ago Changed · +2 lines · -10 tokens per session 0076c2445bb8
- 1mo ago First seen · 29 lines · 50 tokens per session scan A 0eef94c04b75
task-worktree is a skill published in the GitHub repository BuildrAI/Buildr (28 stars, last pushed yesterday), licensed MIT. It adds 48 tokens to every session and 2,302 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
merge-batch
Prepare and merge an owner-selected PR batch with contributor credit and exact-candidate admission. Use for a pasted PR list; combined focused validation is diagnostic, and every actual landing still requires its applicable checks and authorization.
prowler-commit
Creates professional git commits following conventional-commits format. Trigger: When creating commits, after completing code changes, when user asks to commit.
gh-auth-isolation
Safely manage multiple GitHub identities (EMU + personal) in agent workflows.
comet-github
A routing guide for Comet-related GitHub work. It directs requests about pull requests, issues, CI failures, ideas, and fixes to the appropriate review or implementation process.
github-skill
Work with GitHub via the gh CLI — clone repositories, create/list/merge pull requests, create/list issues, and run any other gh command (API calls, workflow runs, releases, repo administration). List operations return parsed JSON.
release-helper
Ensures configuration and code changes are released correctly. Use PROACTIVELY whenever you edit config.json, change any setting, or fix a configuration bug in this project, so the change reaches production.