Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/larksuite/cli/lark-tasknpx skills add larksuite/cli --skill lark-taskgit clone --depth 1 https://github.com/larksuite/cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00125 | $0.03679 |
| Opus 5 | $0.00063 | $0.01840 |
| Sonnet 5 | $0.00025 | $0.00736 |
| Haiku 4.5 | $0.00013 | $0.00368 |
Grade A, and why
lark-task scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- lark-task — 88% identical, 19 lines differ
How it starts
The opening of the file, as written. The whole thing — 188 lines — stays where its author put it; the contents beside it link to each section on GitHub.
task (v2)
CRITICAL — 开始前 MUST 先用 Read 工具读取 ../lark-shared/SKILL.md,其中包含认证、权限处理
命令选择与渐进式发现(必读)
执行任何 Task 命令前,必须先确认能力真实存在,禁止根据用户意图自行拼接或猜测 +<verb>:
- 先将用户意图与下方 Shortcut 表精确匹配。只有表中明确列出的 shortcut 才可直接选择;参数不确定时读取对应 reference 或运行该 shortcut 的
--help。 - 没有精确匹配、或无法确认当前版本是否支持时,先运行
lark-cli task --help,以当前 CLI 输出的命令列表为准。 - help 中存在匹配 shortcut 时,使用 help 列出的完整 shortcut token(例如
+create)运行lark-cli task <shortcut> --help,再按真实 flag 执行。 - help 中没有匹配 shortcut 时,不得尝试相似的
+<verb>;从 help 中选择原生 resource,运行lark-cli task <resource> --help确认 method,再运行lark-cli schema task.<resource>.<method>获取参数结构,最后调用lark-cli task <resource> <method> ...。 - 遇到
unknown_subcommand时必须停止猜测或尝试变体,回到第 2 步重新发现能力。
shortcut 名称只能来自本 Skill 的 Shortcut 表或 lark-cli task --help;原生 resource/method 以逐级 help 为准,参数名、类型和嵌套结构以 method schema 为准。
任务搜索技巧:先区分用户是否特地指定使用搜索 skill,以及是否真的提供了查询关键字(例如任务名称、关键词、片段描述)。如果用户特地指定使用搜索 skill,或明确给出了任务查询关键字,则目标是任务时优先使用
+search。如果用户没有特地指定使用搜索 skill,且意图里没有查询关键字,只有范围条件(例如“今年以来”“已完成”“由我创建”“我关注的”),并且使用+search与+get-related-tasks/+get-my-tasks都能达到目的时,应优先使用列表型能力,而不是搜索型能力。其中,“与我相关 / 我关注的 / 由我创建”等优先考虑+get-related-tasks;“我负责的 / 分配给我”的列表优先考虑+get-my-tasks。不要把时间范围词(例如“今年以来”)本身误当成query去走搜索。 任务搜索相关性提示:+search当前不会自动判断搜索结果与搜索发起人的相关性。如果用户明确要求搜索“与我相关”的任务,必须先识别具体关系,获取当前用户的open_id,并显式传入对应的--assignee(负责人)、--creator(创建人)或--follower(关注人)过滤条件;不能只依赖query期待自动返回与当前用户相关的任务。 任务清单搜索技巧:任务清单也遵循同样的判断逻辑。先区分用户是否特地指定使用搜索 skill,以及是否真的提供了清单查询关键字(例如清单名称、关键词、片段描述)。如果用户特地指定使用搜索 skill,或明确给出了清单查询关键字,则优先使用+tasklist-search。如果用户没有特地指定使用搜索 skill,且意图里没有查询关键字,只有范围条件(例如“由我创建的任务清单”“今年以来创建的清单”),并且使用搜索或原生列取清单都能达到目的时,应优先使用原生tasklists.list接口列取清单(先schema task.tasklists.list,再lark-cli task tasklists list --as user ...),再按creator、created_at等字段做本地筛选和分页控制。 意图区分补充:像“搜索飞书中今年以来我关注的任务”这类表达,虽然字面带有“搜索”,但如果没有真正的查询关键字,且本质是在限定“与我相关 + 时间范围”,则应优先走+get-related-tasks;像“搜索飞书中由我创建的任务清单”这类表达,如果没有清单关键字,且本质是在限定“清单范围 + 创建者”,则应优先走原生tasklists.list后筛选,而不是直接走搜索型 shortcut。 用户身份识别:在用户身份(user identity)场景下,如果用户提到了“我”(例如“分配给我”、“由我创建”),请默认获取当前登录用户的open_id作为对应的参数值。 术语理解 — 待办 disambiguation(必读):
- 用户提到「待办 / todo / 任务」时,先判断归属,不要默认走本 skill。
- 走 lark-meeting 的
minutes +todo(禁止本 skill):上下文含 妙记 / 会议纪要 / minute_token / 妙记 URL(/minutes/);或「在某某妙记里新建/修改待办」「妙记 AI 待办」「会议录制里的待办」。- 走本 skill(lark-task):任务清单、分配给我、项目待办、截止日期/提醒、子任务、任务清单成员;或 applink 含
client/todo/task?guid=;或明确说「飞书任务」「任务中心」「我的任务清单」。- 禁止:用户要在妙记里加待办时,不要调用
task tasklists list、task +create或任何 task 命令去「找清单再放任务」。 友好输出:在输出任务(或清单)的执行结果给用户时,建议同时提取并输出命令返回结果中的url字段(任务链接),以便用户可以直接点击跳转查看详情。
What ships with it
17 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/lark-task-assign.md 1.4 KB
- references/lark-task-comment.md 902 B
- references/lark-task-complete.md 1.3 KB
- references/lark-task-create.md 4.1 KB
- references/lark-task-followers.md 1.2 KB
- references/lark-task-get-my-tasks.md 3.3 KB
- references/lark-task-get-related-tasks.md 2.9 KB
- references/lark-task-reminder.md 1.5 KB
- references/lark-task-reopen.md 740 B
- references/lark-task-search.md 1.5 KB
- references/lark-task-set-ancestor.md 966 B
- references/lark-task-tasklist-create.md 1.3 KB
- references/lark-task-tasklist-members.md 1.2 KB
- references/lark-task-tasklist-search.md 1.4 KB
- references/lark-task-tasklist-task-add.md 1.5 KB
- references/lark-task-update.md 1.8 KB
- references/lark-task-upload-attachment.md 3.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 188 lines · 125 tokens per session scan A f69e7f684327
lark-task is a skill published in the GitHub repository larksuite/cli (16,925 stars, last pushed today), licensed MIT. It adds 125 tokens to every session and 3,679 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
paperclip
Interact with the Paperclip control plane API for task coordination and governance. Use when checking assignments, updating issue status, posting comments, delegating work, managing routines, or calling Paperclip API endpoints.
wayfinder
Plan a huge chunk of work (more than one agent session can hold) as a shared map of decision tickets on your issue tracker, and resolve them one at a time until the way to the destination is clear.
github-labels-query
List GitHub repository labels with perpage pagination and name filtering support.
gsd-audit-milestone
Audit milestone completion against original intent before archiving.
spec-kitty-charter-doctrine
Run charter interview, generation, context, and sync workflows for project governance in Spec Kitty 3.x. Access doctrine artifacts programmatically via DoctrineService. Resolve agent profiles. Load action-scoped governance context iteratively, not all at once. Triggers: "interview for charter", "generate charter"…
bug-triage
Read all open bugs in production/qa/bugs/, re-evaluate priority vs. severity, assign to sprints, surface systemic trends, and produce a triage report. Run at sprint start or when the bug count grows enough to need re-prioritization.