task-start

task-start is a skill for Claude Code from loncadev/baron. It costs 74 tokens per session (1,516 once invoked), scanned A, original, Apache-2.0.

A workflow for starting an existing work item with Baron, the project’s task-tracking system. It loads the item, creates its standard branch, marks it in progress, assigns it, and synchronizes the local checkout.

In plain words
What is it for?
Picking up a task by its ID, key, or URL, checking that the local Git tree is clean, creating the canonical branch, and recording that the work has started.
Why use it?
It prevents agents from skipping ownership, branch, or status updates when beginning work on a known task.

Skill for Claude Code

Written for Claude Code: argument-hint in frontmatter. Also seen: names the AskUserQuestion tool.

Part of the baron plugin — 10 skills shipped together

Good fit Picking up a task by its ID, key, or URL, checking that the local Git tree is clean, creating the canonical branch, and recording that the work has started.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/loncadev/baron/task-start
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add loncadev/baron --skill task-start
Clone the repo
git clone --depth 1 https://github.com/loncadev/baron

Made for: Claude Code.

Or install baron, the plugin that ships this one along with the rest of its 10 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for task-start

README.md
[![agentmods](https://agentmods.dev/badge/skills/loncadev/baron/task-start/github.svg)](https://agentmods.dev/skills/loncadev/baron/task-start)
Your own site
<a href="https://agentmods.dev/skills/loncadev/baron/task-start"><img src="https://agentmods.dev/badge/skills/loncadev/baron/task-start/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for task-start

Your own site · 80×15
<a href="https://agentmods.dev/skills/loncadev/baron/task-start"><img src="https://agentmods.dev/badge/skills/loncadev/baron/task-start.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 74 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,516 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00074 $0.01516
Opus 5.5 $0.00030 $0.00606
Sonnet 5.5 $0.00015 $0.00303
Haiku 4.5 $0.00007 $0.00152

Measured 1mo ago against content hash 5467370b4283, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

task-start scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/claude-code/skills/task-start/SKILL.md · 90 lines

How it starts

The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Start a task (existing work item)

Run the task-start recipe as ONE deterministic call, then sync the local working tree. The engine enforces the provider-side order (load → branch → in_progress → assign to you → comment); your job is the inputs, the local git, the ownership check, and the briefing.

Steps

  1. Resolve the issue id from the user's words (123, AB#123, or a work-item URL → extract the integer). Ask only if genuinely absent.

  2. Preflight local git (local git is YOUR job, not Baron's): run git status --porcelain — if dirty, stop and ask the user to commit/stash first. Never start work on a dirty tree.

  3. Run the recipe — call baron_recipe_run with the only input it declares:

    { "name": "task-start", "inputs": { "issueId": "<id>" } }
    

    The engine loads the item, creates the canonical branch (<prefix>/<id>-<slug>, derived by Baron's core so every agent picks the same name), moves it to in_progress, assigns it to you (issue.assign @me), and comments the branch on the item. Starting a task makes it yours.

  4. If it stops on the ownership guard, ask — never take over silently. The recipe refuses only when the item is assigned to someone else, with RECIPE_REQUIRE: "AB#N is assigned to <them>, not you (<you>). Assign it to yourself first…". On that error:

    • Ask the user (AskUserQuestion: "AB#N is assigned to <them>. Take it over and start?" → Take over / Cancel).
    • On Take over → baron_issue_write { op: "assign", id: "<id>", assignee: "@me" }, then re-run the recipe from step 3 (the guard now passes because the item is yours).
    • On Cancel → stop. Do not start, do not reassign.

    An unassigned item, or one already yours, never hits this — it just starts. So re-running task-start on your own work is silent and idempotent.

  5. Sync the local checkout to the branch Baron created on the provider:

    git fetch origin && git switch <branch-name-from-the-result>
    
  6. Pull into the active sprint if needed (sprint providers only): compare the item's iteration with the active sprint. If it's in a past iteration or has none while a sprint is active (baron_issue_read op=iterations → the one with current: true), ask whether to pull it in, and on yes call baron_issue_write { op: "set_iteration", id, iteration: "@current" }. If no sprint is current, skip silently. (This is the "scope creep" checkpoint — the user opts in by pulling mid-sprint.)

  7. Understand the work before coding — read the whole item, not just the title. Baron's read already gives you the body (a Bug's repro steps, otherwise the description), type, labels, and parent. Gather the rest so you start informed, using the provider's read/explore tools:

    • Comments / discussion on the item — decisions, gotchas, prior attempts, review feedback.
    • Attachments (specs, screenshots, logs, stack traces) — open the ones that look relevant.
    • Extra native fields the body doesn't carry — a Bug's System Info, Acceptance Criteria, and any custom fields.

Read the full file on GitHub · 90 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 90 lines · 74 tokens per session scan A 5467370b4283

Subscribe to this mod's changes

task-start is a skill published in the GitHub repository loncadev/baron (1 stars, last pushed 16d ago), licensed Apache-2.0. It adds 74 tokens to every session and 1,516 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.