task

task is a skill for Claude Code from LuisFelipeMoro/Harness-devkit. It costs 87 tokens per session (1,210 once invoked), scanned A, original, MIT.

A complete workflow for implementing one coding task, from technical design and task breakdown through coding, testing, review, stress testing, and a final decision.

In plain words
What is it for?
Use it when you have one concrete coding task and want it implemented, tested, reviewed, and prepared as a pull request with progress records.
Why use it?
It coordinates the checks needed to deliver a single change and blocks readiness when important security or quality problems remain.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions CLAUDE.md; mentions subagents.

Part of the coding-pipeline plugin — 6 skills, 20 agents, 5 hooks shipped together

Good fit Use it when you have one concrete coding task and want it implemented, tested, reviewed, and prepared as a pull request with progress records.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/luisfelipemoro/harness-devkit/task
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add LuisFelipeMoro/Harness-devkit --skill task
Clone the repo
git clone --depth 1 https://github.com/LuisFelipeMoro/Harness-devkit

Made for: Claude Code.

Or install coding-pipeline, the plugin that ships this one along with the rest of its 6 skills, 20 agents, 5 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for task

README.md
[![agentmods](https://agentmods.dev/badge/skills/luisfelipemoro/harness-devkit/task/github.svg)](https://agentmods.dev/skills/luisfelipemoro/harness-devkit/task)
Your own site
<a href="https://agentmods.dev/skills/luisfelipemoro/harness-devkit/task"><img src="https://agentmods.dev/badge/skills/luisfelipemoro/harness-devkit/task/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for task

Your own site · 80×15
<a href="https://agentmods.dev/skills/luisfelipemoro/harness-devkit/task"><img src="https://agentmods.dev/badge/skills/luisfelipemoro/harness-devkit/task.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 87 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,210 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00087 $0.01210
Opus 5.5 $0.00035 $0.00484
Sonnet 5.5 $0.00017 $0.00242
Haiku 4.5 $0.00009 $0.00121

Measured today against content hash fe3852a1591d, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

task scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/coding-pipeline/skills/task/SKILL.md · 33 lines

How it starts

The opening of the file, as written. The whole thing — 33 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Run the single-task implementation pipeline (no planning phase). If no task is provided, ask first. Load agent files on demand — never pre-load all at once; use references/output-format.md headers and show a Pipeline Summary after each Verdict.

Full sub-task loop detail: references/loop.md.

Contract

  • Input: a single coding task (tech stack derived from the existing codebase if present).
  • Output: implemented, tested sub-tasks, each with a Verdict, its own reviewed PR into release/{slug}-{key}, and a [{key}]-prefixed PROGRESS.md entry at repo root; then a PR from release/{slug}-{key} to main, reviewed by /pr-review with its findings posted.
  • Boundary: no full planning phase — starts at Architecture; per sub-task max ~200 lines with a clear interface boundary, split if not independently testable.
  • Rules: Coder owns tests + implementation, written against the frozen Test Case table and falsified before handoff; story ACs + that table are the frozen acceptance contract; Reviewer and StressTester run only after QA approval or escalation; unmitigated CRITICAL security is automatic NOT READY.

Model assignment

Dispatch the Architect on opus; Scrum Master, Plan Reviewer, QA, Reviewer, Stress, Verdict, and the orchestrator on sonnet; the Coder (core + backend/frontend overlay), Tuner, DevOps, and any read-side Explore/mapping sub-agent on haiku (see CLAUDE.md Model assignment table).

Steps

  1. Delivery setup (once) — derive the slug + key from the task name, create .worktrees/dlv-{key}/ on branch release/{slug}-{key}, and run everything inside it, per ../../references/delivery-and-worktree.md. An existing worktree for the key means resume, not recreate. Never commit or merge to main — the terminal step is a PR from the release branch.
  2. Planning (once) — follow skills/planning/SKILL.md from Phase 0.5 (Codebase Discovery), then Architecture, then the Phase 2.5 plan review — Priya must return PLAN APPROVED (or her leftover findings must reach the human) before any code; run the Backend-Driven Architecture tier check; produce and confirm a Task Manifest (sizing rules and tier check detail in references/loop.md). If the session is not the orchestrator (prompt does not open with "You are the delivery orchestrator") and the manifest has ≥ 2 sub-tasks or the codebase map shows a wide blast radius, print once, then continue (never stop): "Exit, then run: claude --agent orchestrator, and inside it: /task {args}". A narrow single-sub-task change prints nothing.
  3. Execution options — planning's own step 8 runs the checkpoint (bench-context.py --manifest): dispatch counts and a token range for as-planned / all-standard / legacy-full-loop. Do not enter the sub-task loop until the operator has picked or edited the manifest's rosters.
  4. Sub-task loop — repeat per sub-task, one at a time (sub-tasks share the delivery worktree, so never dispatch two Coders concurrently), roster-driven: each sub-task's manifest Roster decides which of A story (ScrumMaster, only when the manifest has ≥ 2 rows) → B code on feat/{key}-{story-slug} cut from the release branch — implement to spec, write the specified tests, falsify each (Coder + one tier overlay) → C QA audit + gates → D review (Reviewer folds in the Stress lens on light/standard; StressTester dispatched separately only for roster full) → E verdict → F story PR into release/* as a draft, reviewed inline by step D's Reviewer — no story-level /pr-review — merge --no-ff once no findings remain, then checkpoint + PROGRESS.md. Exact dispatch, routing signals, Bug-Fix Loop, Tuner limits, checkpoint table, and context budget are in references/loop.md.
  5. Finish — when a sub-task is PRODUCTION READY, load agents/devops.md for Docker/CI artifacts; otherwise continue to the next sub-task. When all sub-tasks are done, push the release branch (ask first) and open a PR to main.
  6. Delivery PR review — run /pr-review on the release PR with the delivery file, Reuse Map, Blast Radius, and manifest in context. Each sub-task was already reviewed on its own story PR; this second pass has a different job, because no story review saw the delivery as one diff, so cross-sub-task duplication and plan drift are only visible here. It posts inline comments and prints the Gaps block (unimplemented ACs · spec drift · missing Test Case rows · duplication %). Then print the final summary. Never merge — the PR stays open for the human.

Read the full file on GitHub · 33 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +1 lines fe3852a1591d
  2. 22d ago Changed · +3 lines 65c404f8f000
  3. 1mo ago Changed · +41 tokens per session 46c83d6b6701
  4. 1mo ago Changed · +1 lines 6615f36ef514
  5. 1mo ago First seen · 28 lines · 46 tokens per session scan A c597daeea436

Subscribe to this mod's changes

task is a skill published in the GitHub repository LuisFelipeMoro/Harness-devkit (13 stars, last pushed today), licensed MIT. It adds 87 tokens to every session and 1,210 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

chronicle

Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…

microsoft/vscode · 72 tokens

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

component-fixtures

Use when creating or updating component fixtures for screenshot testing or their shared infrastructure, or when designing UI components to be fixture-friendly. Covers fixture file structure, theming, service setup, CSS scoping, async rendering, validation, and common pitfalls.

microsoft/vscode · 53 tokens