task-sync

A set of instructions for comparing work items with the actual state of their pull requests and branches, then correcting stale tracker statuses with Baron.

In plain words
What is it for?
It helps find merged work that is still marked in progress and reconcile stale labels or statuses across supported trackers such as GitHub and Azure DevOps.
Why use it?
Work trackers may still show a task as in progress after its pull request has merged, so the board no longer reflects reality.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/loncadev/baron/task-sync
Any agent
npx skills add loncadev/baron --skill task-sync
Clone the repo
git clone --depth 1 https://github.com/loncadev/baron

Made for: Claude Code, Codex.

Per session 71 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,034 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00071 $0.01034
Opus 5 $0.00036 $0.00517
Sonnet 5 $0.00014 $0.00207
Haiku 4.5 $0.00007 $0.00103

Measured 2d ago against content hash b34d1d1bfa27, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

task-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/claude-code/skills/task-sync/SKILL.md · 67 lines

How it starts

The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Sync the board with PR reality

Trackers often can't auto-advance a work item when its PR merges, so cards rot in the wrong state. This skill detects that drift from facts, not guesses — every fact comes from a Baron primitive — and offers a batch fix. It works on any provider Baron binds (Azure DevOps, GitHub), because it reads normalized roles and PR state, not vendor columns.

The drift rule (fixed — you apply it, you don't judge it)

For each in-flight item, correlate it to its branch's PR via the core-derived branchName:

  • A — merged-but-stuck (the common one): role is in_progress AND its branch has a merged PR → should be in_review. Auto-fixable.

  • C — closed with a stale role label (label-keyed providers): the item's role reads done (the provider closed it — a PR merging with Closes #N) but labels still carries another role's label, so boards and label filters keep showing it as in-flight. Auto-fixable: run the task-reconcile recipe. It commands no role — it clears the label the provider's own state contradicts. Prefer it over a transition here: transitioning would work on GitHub and be wrong on a provider where a close does not mean done. Since task-land reconciles after every merge, this class should now only appear for items landed before that, or where the provider had not closed the item yet when the run finished.

  • B — in-review-without-a-PR (rare): role is in_review AND its branch has no PR at all → flag for the human; do NOT auto-change (something is off — wrong branch, force-push, manual move).

Steps

  1. Detect — one call, no correlating by hand. baron_recipe_run { name: "task-sync-report", inputs: { scope } }scope: "all" sweeps everyone, empty sweeps the caller's own items. The engine runs the sweep and its context comes back with two lists of item keys:
    • mergedButOpen — class A, auto-fixable
    • reviewWithoutPr — class B, report only
  2. Class C is yours to spot. The report cannot express it: recipe conditions compare values, they do not search a list of labels. Read it off baron_issue_read { op: "query", role: "done" } and look for a stale role label. Reading is always allowed; fixing goes through a recipe like everything else.
  3. Report + confirm. A compact table (key · current role · finding · fix). Nothing drifted → say so and stop. Batch-confirm the class-A set with AskUserQuestion. Class B is never auto-fixed.
  4. Apply — one recipe call per item, so one failure cannot abort the rest:
    • class A → baron_recipe_run { name: "task-move", inputs: { issueId, role: "in_review" } }
    • class C → baron_recipe_run { name: "task-reconcile", inputs: { issueId } }

Read the full file on GitHub · 67 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 67 lines · 71 tokens per session scan A b34d1d1bfa27

Subscribe to this mod's changes

task-sync is a skill published in the GitHub repository loncadev/baron (1 stars, last pushed 11d ago), licensed Apache-2.0. It adds 71 tokens to every session and 1,034 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

issue-triage

Issue triage: audit open issues, categorize, detect duplicates, cross-ref PRs, risk assessment, post comments. Args: "all" for deep analysis of all, issue numbers to focus (e.g. "42 57"), "en"/"fr" for language, no arg = audit only in French.

rtk-ai/rtk · 70 tokens

github-tool

GitHub integration tool for listing and creating issues and PRs via the gh CLI wrapper. Use when: creating or listing issues or pull requests, or checking repository work on GitHub.

xuiltul/animaworks · 40 tokens

a11y-remediate

Use to produce a leader-facing remediation proposal from one or more /a11y-audit outputs plus team and product context. Translates audit findings into sprint plans, staffing asks, customer-facing language, compliance rollups, and critical-path analysis. Refuses to fabricate numbers, owners, or commitments beyond the…

gitkraken/vscode-gitlens · 72 tokens

prioritize

Prioritize triaged/investigated issues — recommends shortlist, backlog, won't fix, or community contribution with priority signals and draft communications.

gitkraken/vscode-gitlens · 30 tokens

azure-devops

Manage Azure DevOps projects, work items, repos, PRs, pipelines, wikis, test plans, security alerts, variable groups, environments/approvals, branch policies, and attachments. Use when user asks to: manage sprints, create/update work items, list repos, create PRs, run pipelines, search code, manage wiki pages, check…

sanjay3290/ai-skills · 105 tokens

finn-build

Claim the next safe agent-ready issue from Linear, implement it, and open a PR. Use when asked to run Finn-loop's builder, work the approved queue, or fix Finn-loop review feedback. Designed for /loop; one pass does one unit of work.

finna/Finn-loop · 57 tokens