backlog-templates

backlog-templates is a skill for Claude Code from microsoft/hve-core. It costs 35 tokens per session (3,424 once invoked), scanned A, original, MIT.

A shared set of templates and rules for turning planning results into work items for Azure DevOps or GitHub. It covers common formatting, identifiers, and content-handling conventions.

In plain words
What is it for?
It is for creating standardised handoffs from security, privacy, accessibility, responsible-AI, and related planning work.
Why use it?
It prevents different planning workflows from producing inconsistent or unsafe backlog items.

Skill for Claude Code ✓ vendor

Written for Claude Code: user-invocable in frontmatter.

Good fit It is for creating standardised handoffs from security, privacy, accessibility, responsible-AI, and related planning work.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/microsoft/hve-core/backlog-templates
About the project

HVE Core is a collection of agents, prompts, coding instructions, and skills for building repeatable software-development workflows with GitHub Copilot. It is intended for individuals and teams that want structured AI-assisted research, planning, implementation, and review, while the catalogue entries provide many of its reusable workflow components.

microsoft/hve-core · 1,606 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add microsoft/hve-core --skill backlog-templates
Clone the repo
git clone --depth 1 https://github.com/microsoft/hve-core

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for backlog-templates

README.md
[![agentmods](https://agentmods.dev/badge/skills/microsoft/hve-core/backlog-templates/github.svg)](https://agentmods.dev/skills/microsoft/hve-core/backlog-templates)
Your own site
<a href="https://agentmods.dev/skills/microsoft/hve-core/backlog-templates"><img src="https://agentmods.dev/badge/skills/microsoft/hve-core/backlog-templates/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for backlog-templates

Your own site · 80×15
<a href="https://agentmods.dev/skills/microsoft/hve-core/backlog-templates"><img src="https://agentmods.dev/badge/skills/microsoft/hve-core/backlog-templates.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 35 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,424 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00035 $0.03424
Opus 5.5 $0.00014 $0.01370
Sonnet 5.5 $0.00007 $0.00685
Haiku 4.5 $0.00003 $0.00342

Measured yesterday against content hash 6f81f57e1a90, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

backlog-templates scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/skills/shared/backlog-templates/SKILL.md · 233 lines

How it starts

The opening of the file, as written. The whole thing — 233 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Backlog Templates

Shared reference for ADO and GitHub work-item template generation, content sanitization, autonomy-tier vocabulary, disclaimer-block placement, and work-item ID conventions used by every planner that emits a backlog handoff.

Overview

Planners that emit Phase-final backlog work items all need the same dual-format template skeletons, the same content sanitization rules, and the same convention for where to assign work-item IDs. This skill consolidates those shared pieces so each planner instruction file can reference one source instead of restating them.

Callers:

  • RAI Planner (rai-planner skill references/backlog-handoff.md)
  • Security Planner (Security Planner agent; security-specific handoff details in the security-planning skill's references/backlog-formats.md)
  • SSSC Planner (SSSC Planner agent, governed by sssc-planner.instructions.md)
  • Accessibility Planner (accessibility/accessibility skill references/phases/backlog-handoff.md)
  • Privacy Planner (Privacy Planner agent, governed by the privacy-standards skill's references/privacy-identity.md)

What stays per-planner (NOT in this skill):

  • Domain-specific HTML and markdown body content (NIST characteristic vs. STRIDE category vs. WCAG criterion vs. Scorecard check).
  • Severity-to-priority and severity-to-tier mapping tables — different input vocabularies per planner.
  • Work-item hierarchy mapping (Epic / Feature / Story / Task / Bug).
  • The accessibility disclaimer text (pinned to accessibility-identity.instructions.md by the L7 disclaimer lever).

ADO Work Item Template

ADO description fields use HTML and embed a planner-specific field block plus a verbatim disclaimer blockquote. Parameterize the skeleton with the planner ID prefix and per-planner field set.

Skeleton:

<div>
  <h3>{Domain} Control: {control_name}</h3>
  <!-- planner-specific field block goes here -->
  <h4>Implementation</h4>
  <p>{implementation_details}</p>
  <h4>Acceptance Criteria</h4>
  <ul>
    <li>{criterion_1}</li>
    <li>{criterion_2}</li>
  </ul>
  <blockquote>
  <p><strong>Note</strong> — The author created this content with assistance from AI. All outputs should be reviewed and validated by a qualified {role} reviewer before use.</p>
  <ul><li><input type="checkbox" disabled /> Reviewed and validated by a qualified {role} reviewer</li></ul>
  </blockquote>
</div>

Read the full file on GitHub · 233 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed 6f81f57e1a90
  2. 1mo ago Changed 916ecd958f40
  3. 2mo ago First seen · 233 lines · 35 tokens per session scan A 5583a306af0f

Subscribe to this mod's changes

backlog-templates is a skill published in the GitHub repository microsoft/hve-core (1,606 stars, last pushed today), licensed MIT. It adds 35 tokens to every session and 3,424 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

backlog-templates compared with skills from other repositories

backlog-templates next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
backlog-templatesmicrosoft/hve-coreSkill1.6ktodayMITA35Claude Code
imagegenopenai/codexSkill134ktodayApache-2.0A113Codex
local-ai-agentsmicrosoft/ai-agents-for-beginnersSkill79kyesterdayMITA200Claude Code, Codex
playwright-climicrosoft/playwrightSkill100kyesterdayApache-2.0A19Claude Code
browser-automationopenclaw/openclawSkill394ktodayMITA36Claude Code
systematic-debuggingobra/superpowersSkill314k4d agoMITA21Claude Code
next-cache-components-adoptionvercel/next.jsSkill143ktodayMITA95Claude Code