Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/loncadev/baron/task-syncnpx skills add loncadev/baron --skill task-syncgit clone --depth 1 https://github.com/loncadev/baronWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00071 | $0.01034 |
| Opus 5 | $0.00036 | $0.00517 |
| Sonnet 5 | $0.00014 | $0.00207 |
| Haiku 4.5 | $0.00007 | $0.00103 |
Grade A, and why
task-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Sync the board with PR reality
Trackers often can't auto-advance a work item when its PR merges, so cards rot in the wrong state. This skill detects that drift from facts, not guesses — every fact comes from a Baron primitive — and offers a batch fix. It works on any provider Baron binds (Azure DevOps, GitHub), because it reads normalized roles and PR state, not vendor columns.
The drift rule (fixed — you apply it, you don't judge it)
For each in-flight item, correlate it to its branch's PR via the core-derived branchName:
-
A — merged-but-stuck (the common one): role is
in_progressAND its branch has a merged PR → should bein_review. Auto-fixable. -
C — closed with a stale role label (label-keyed providers): the item's role reads
done(the provider closed it — a PR merging withCloses #N) butlabelsstill carries another role's label, so boards and label filters keep showing it as in-flight. Auto-fixable: run thetask-reconcilerecipe. It commands no role — it clears the label the provider's own state contradicts. Prefer it over a transition here: transitioning would work on GitHub and be wrong on a provider where a close does not meandone. Since task-land reconciles after every merge, this class should now only appear for items landed before that, or where the provider had not closed the item yet when the run finished. -
B — in-review-without-a-PR (rare): role is
in_reviewAND its branch has no PR at all → flag for the human; do NOT auto-change (something is off — wrong branch, force-push, manual move).
Steps
- Detect — one call, no correlating by hand.
baron_recipe_run { name: "task-sync-report", inputs: { scope } }—scope: "all"sweeps everyone, empty sweeps the caller's own items. The engine runs the sweep and its context comes back with two lists of item keys:mergedButOpen— class A, auto-fixablereviewWithoutPr— class B, report only
- Class C is yours to spot. The report cannot express it: recipe conditions compare values, they
do not search a list of labels. Read it off
baron_issue_read { op: "query", role: "done" }and look for a stale role label. Reading is always allowed; fixing goes through a recipe like everything else. - Report + confirm. A compact table (key · current role · finding · fix). Nothing drifted → say
so and stop. Batch-confirm the class-A set with
AskUserQuestion. Class B is never auto-fixed. - Apply — one recipe call per item, so one failure cannot abort the rest:
- class A →
baron_recipe_run { name: "task-move", inputs: { issueId, role: "in_review" } } - class C →
baron_recipe_run { name: "task-reconcile", inputs: { issueId } }
- class A →
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 67 lines · 71 tokens per session scan A b34d1d1bfa27
task-sync is a skill published in the GitHub repository loncadev/baron (1 stars, last pushed 11d ago), licensed Apache-2.0. It adds 71 tokens to every session and 1,034 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
issue-triage
Issue triage: audit open issues, categorize, detect duplicates, cross-ref PRs, risk assessment, post comments. Args: "all" for deep analysis of all, issue numbers to focus (e.g. "42 57"), "en"/"fr" for language, no arg = audit only in French.
github-tool
GitHub integration tool for listing and creating issues and PRs via the gh CLI wrapper. Use when: creating or listing issues or pull requests, or checking repository work on GitHub.
a11y-remediate
Use to produce a leader-facing remediation proposal from one or more /a11y-audit outputs plus team and product context. Translates audit findings into sprint plans, staffing asks, customer-facing language, compliance rollups, and critical-path analysis. Refuses to fabricate numbers, owners, or commitments beyond the…
prioritize
Prioritize triaged/investigated issues — recommends shortlist, backlog, won't fix, or community contribution with priority signals and draft communications.
azure-devops
Manage Azure DevOps projects, work items, repos, PRs, pipelines, wikis, test plans, security alerts, variable groups, environments/approvals, branch policies, and attachments. Use when user asks to: manage sprints, create/update work items, list repos, create PRs, run pipelines, search code, manage wiki pages, check…
finn-build
Claim the next safe agent-ready issue from Linear, implement it, and open a PR. Use when asked to run Finn-loop's builder, work the approved queue, or fix Finn-loop review feedback. Designed for /loop; one pass does one unit of work.