agentmods.dev

taskgo

taskgo is a skill for Claude Code, Codex from ithinkihaveacat/dotfiles. It costs 71 tokens per session (4,247 once invoked), scanned A, original, Apache-2.0.

A private Git-backed repository for tracking projects, tasks, decisions, and status across multiple technical projects. It keeps current information in Markdown files and uses Git history for the record of changes.

In plain words
What is it for?
Use it to capture tasks, update STATUS.md, manage plans and architecture decision records, store references and bug reports, and synchronize project tracking.
Why use it?
It gives ongoing work a single place for current plans and status while preserving how those records changed over time. It is designed for resuming work without maintaining long activity journals.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions AGENTS.md.

not rated 48repo changed today A scan SkillSpector: warn 71 tokens original Apache-2.0

Good fit Use it to capture tasks, update STATUS.md, manage plans and architecture decision records, store references and bug reports, and synchronize project tracking.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/ithinkihaveacat/dotfiles/taskgo
View source ↗ ithinkihaveacat/dotfiles
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add ithinkihaveacat/dotfiles --skill taskgo
Clone the repo
git clone --depth 1 https://github.com/ithinkihaveacat/dotfiles

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for taskgo

README.md
[![agentmods](https://agentmods.dev/badge/skills/ithinkihaveacat/dotfiles/taskgo/github.svg)](https://agentmods.dev/skills/ithinkihaveacat/dotfiles/taskgo)
Your own site
<a href="https://agentmods.dev/skills/ithinkihaveacat/dotfiles/taskgo"><img src="https://agentmods.dev/badge/skills/ithinkihaveacat/dotfiles/taskgo/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for taskgo

Your own site · 80×15
<a href="https://agentmods.dev/skills/ithinkihaveacat/dotfiles/taskgo"><img src="https://agentmods.dev/badge/skills/ithinkihaveacat/dotfiles/taskgo.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 4,247 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Prompt Injection · line 52
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
  • medium Rogue Agent · line 74
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00071 $0.04247
Opus 5.5 $0.00028 $0.01699
Sonnet 5.5 $0.00014 $0.00849
Haiku 4.5 $0.00007 $0.00425

Measured today against content hash 6bae53e00c45, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

taskgo scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/taskgo/SKILL.md · 333 lines

How it starts

The opening of the file, as written. The whole thing — 333 lines — stays where its author put it; the contents beside it link to each section on GitHub.

taskgo

taskgo manages a private control repository spanning multiple projects. Humans read current Markdown; agents edit it, operate Git, reconstruct history, and generate summaries.

Tool Execution

taskgo is bundled in scripts/taskgo within this skill directory. Commands operate on a fixed control repository root, resolved in this order:

  1. --root DIR / -R DIR (must appear before the command)
  2. the TASKGO_ROOT environment variable
  3. the default ~/.projects

Execution resolution never depends on the current working directory. Run taskgo doctor to see the resolved root. To execute the tool:

  1. Optimal ($PATH): taskgo <command>
  2. Dynamic anchor: <skill-dir>/scripts/taskgo <command>

Core Invariants

  1. Current Truth: HEAD describes current belief. Git owns administrative history. Avoid accumulating historical journals in Markdown.
  2. Data Segregation: Private tracker information must not implicitly flow into linked public/shared artifacts. Conversation: trailers and session URLs belong strictly in the control repository metadata. Artifact path references prefer $HOME-relative form (~/...).
  3. Link Portability: Internal links must be standard relative Markdown (no file://). External references must be network URLs (https://) or unlinked monospace text.
  4. STATUS.md: This is the self-contained projection of current operational state. Reading it directly answers status and next steps.
  5. Commit Authority: The <!-- taskgo:allow-local-commits --> marker in the control repo's AGENTS.md grants standing authority for guarded local checkpoint commits (create, checkpoint, fix). Never rewrite artifact history.
  6. No Administrative Metadata: Do not invent metadata fields like created, updated, or blocked_since in YAML frontmatter. Git owns administrative history. Do not duplicate Project:, Task:, or Event: trailers.

Tasks

IDs are globally unique TASK-XXXXX (five hex digits). Task files are tasks/TASK-XXXXX-<slug>.md. Pass --slug (max 32 chars) when creating tasks if the title is long.

Read the full file on GitHub · 333 lines

Files

What ships with it

23 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +1 lines 6bae53e00c45
  2. 4d ago Changed · +2 lines · -2 tokens per session 2669000f5f73
  3. 5d ago Changed · +11 lines 8e3cc2ead9c8
  4. 6d ago Changed · +31 lines 228487aa78ff
  5. 7d ago Changed · +30 lines 2f5e07bf1fe0
  6. 12d ago Changed · +17 lines d316b7939567
  7. 13d ago Changed f9d97a3c5b8f
  8. 14d ago Changed · +10 lines 25c35cabf488
  9. 15d ago Changed · +5 lines c8e2eaf82468
  10. 16d ago First seen · 226 lines · 73 tokens per session scan A 3309a26efc06

Subscribe to this mod's changes

taskgo is a skill published in the GitHub repository ithinkihaveacat/dotfiles (48 stars, last pushed today), licensed Apache-2.0. It adds 71 tokens to every session and 4,247 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

ProductivityProject managementdotfilesfishshell
Related

Other skills, from other repositories

mbo-plan

Plan a new objective end-to-end in this repo's docs/mbo Management-By-Objective system — turn a GitHub issue or a gss draft-PR worktree into consistent design/spec/plan artifacts and track it in docs/mbo/index.md. Use this whenever the user wants to START planning or designing a new feature, skill, CLI, or service…

sfc-gh-eraigosa/dotfiles · 260 tokens

herdr

Use when the user mentions herdr or is working inside a herdr pane and wants to save/restore a pane layout, change herdr's theme, prefix or other preferences on this host only, start or check on an agent in another herdr pane, add, turn off or open a herdr plugin (file viewer, keybindings), or asks why the herdr…

sfc-gh-eraigosa/dotfiles · 91 tokens

devlog

Keep DEVLOG.md up to date and use it to resume project context in the user's personal developer-log style. Use when the user asks to update, write, continue, summarize, resume, catch up from, or maintain @DEVLOG.md / DEVLOG.md after or before a work session, or asks to capture what they did, learned, decided, got…

wunki/dotfiles · 89 tokens

there-there

Manage There There helpdesk tickets, contacts, and channels using the there-there CLI. Use when the user wants to list, view, reply to, search, or manage tickets; assign team members; manage tags; view contacts; or interact with there-there.app from the command line.

freekmurze/dotfiles · 63 tokens

master-build

Keep a stable, installed build of a desktop app that the owner can use and test while agents keep working in the repository. Use when agents building or launching the app are getting in the owner's way, when the working tree is often mid edit and does not compile, when asked for a "master build", or when the owner…

freekmurze/dotfiles · 80 tokens

morning-coffee

Prepare a source-read-only daily engineering brief with GitHub pull requests, today's Google Calendar agenda, current-quarter Transport planning links, incident.io on-call and incident context, RFCs needing review, ranked daily priorities, and previous-working-day activity. Use for morning check-ins, daily planning…

ryancharris/dotfiles · 68 tokens