Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/Everyone-Needs-A-Copilot/claude-copilotnpx agentmods add skills/everyone-needs-a-copilot/claude-copilot/task-copilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/task-copilot)<a href="https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/task-copilot"><img src="https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/task-copilot/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/everyone-needs-a-copilot/claude-copilot/task-copilot"><img src="https://agentmods.dev/badge/skills/everyone-needs-a-copilot/claude-copilot/task-copilot.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01069 |
| Opus 5.5 | $0.00016 | $0.00428 |
| Sonnet 5.5 | $0.00008 | $0.00214 |
| Haiku 4.5 | $0.00004 | $0.00107 |
Grade A, and why
task-copilot scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Task Copilot
tc is the execution record. Use it instead of stuffing long plans or implementation logs into chat.
Command rule
Use --json on commands that support it.
Preferred binary:
tc
Fallback:
./.venv-tc/bin/tc
Core loop
- retrieve the task
- do the work
- store the work product
- verify required delivery and lifecycle criteria through task-bound QA before completing the task
Commands:
tc task get <taskId> --json
tc wp store --task <taskId> --type <type> --title "..." --content "..." --json
tc task update <taskId> --status completed --json
Code-Execution Path
Prefer the importable APIs for batches:
python3 - <<'PY'
from tc.api import create_prd, create_task, transaction
from tc.db.connection import get_db, find_db_path
conn = get_db(find_db_path())
try:
with transaction(conn):
prd = create_prd(title="Example", conn=conn)
task = create_task(prd=prd["id"], title="Example task", conn=conn)
finally:
conn.close()
print(f"PRD-{prd['id']} TASK-{task['id']}")
PY
Use a separate cc.api block for memory or skill batches. Do not import tc.api and cc.api in the same Python block.
QA Metadata
Implementation tasks that require verification should use metadata like:
{"requiresQa": true, "qaStatus": "pending"}
For current tc 2.0.0 work, register a schemaVersion 2 acceptance contract before
implementation with tc task contract <id> --file acceptance.json --json.
Include observable criteria and source scopes covering implementation, dependencies
and relevant authority. Capture tc task evidence-identity <id> before checks,
compare a second capture afterwards, and preserve the exact identity in the
same task's test work product with observed results for every criterion.
Use one verdict per result. Metadata alone, an artifact marker alone or stale source evidence cannot support approval. Completion also rejects unfinished dependencies. Historical completed records remain historical; pending work needs a current contract and fresh verification.
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed 5835ad08c1c1
- 7d ago Changed · +16 lines 532784c01d7a
- 1mo ago Changed · +18 lines 3e3759cdd688
- 1mo ago First seen · 102 lines · 40 tokens per session scan A c7520436f80b
task-copilot is a skill published in the GitHub repository Everyone-Needs-A-Copilot/claude-copilot (14 stars, last pushed yesterday), licensed MIT. It adds 40 tokens to every session and 1,069 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.
Other skills, from other repositories
RemoteTeamCommander
Complete operating system for remote and distributed teams — async communication, time zone equity, virtual culture, performance management at a distance, and preventing remote-class citizens.
slack
Read and search messages, channels, and threads in the user's Slack workspace. Use to catch up on team discussions and decisions, post channel messages, and reply to coworkers through Slack's official MCP server.
onboard
Onboarding doc for a new contributor or agent — project state, conventions, priorities relevant to the specified role.
hr-operations
A skill for designing remote-work and team-operation policies. It covers flexible work, asynchronous communication, collaboration tools, productivity tracking, and employee experience.
toolbox
Pre/post dev toolbox — named bundles of skills/agents loaded before development work and councils of experts invoked after. Run /toolbox or the toolbox.py CLI to list, activate, initialize, export, import, and validate toolboxes. Invoke at the start or end of a dev session, when setting up a new repo, or when sharing…
loop-orchestrator
Operate a fleet of durable agent loops under .loop/ — schedule which loop runs next, assign agents to roles (maker vs checker), enforce promotion gates from propose-only to write access, allocate budgets, detect stalled or dead loops, and roll up fleet status into one report. Use when asked to "run the loops"…