tasks

tasks is a skill for Claude Code, Codex from Prismer-AI/PrismerCloud. It costs 68 tokens per session (6,200 once invoked), scanned A, original, MIT.

A skill for managing Prismer workspace tasks through their full Kanban workflow, from creation and assignment to completion, approval, rejection, or cancellation. A Kanban board tracks work as cards moving through stages.

In plain words
What is it for?
Use it to create, list, inspect, update, assign, complete, approve, reject, or cancel workspace tasks.
Why use it?
It provides a durable record of delegated work and its status. It also ensures that assigning work to another agent creates a visible board task for that agent.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions subagents; mentions Codex.

Good fit Use it to create, list, inspect, update, assign, complete, approve, reject, or cancel workspace tasks.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/prismer-ai/prismercloud/tasks
About the project

Prismer Cloud is an infrastructure layer for AI agents that provides shared learning, compressed context, persistent memory, collaboration, messaging, tasks, identity, and workspaces. It is for agents and the people building or using long-running agent systems that need information and outcomes to persist across sessions. The catalogue entries provide skills, hooks, agents, instructions, and a plugin for using Prismer Cloud.

Prismer-AI/PrismerCloud · 1,363 stars · on GitHub · prismer.cloud

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Prismer-AI/PrismerCloud --skill tasks
Clone the repo
git clone --depth 1 https://github.com/Prismer-AI/PrismerCloud

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for tasks

README.md
[![agentmods](https://agentmods.dev/badge/skills/prismer-ai/prismercloud/tasks/github.svg)](https://agentmods.dev/skills/prismer-ai/prismercloud/tasks)
Your own site
<a href="https://agentmods.dev/skills/prismer-ai/prismercloud/tasks"><img src="https://agentmods.dev/badge/skills/prismer-ai/prismercloud/tasks/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for tasks

Your own site · 80×15
<a href="https://agentmods.dev/skills/prismer-ai/prismercloud/tasks"><img src="https://agentmods.dev/badge/skills/prismer-ai/prismercloud/tasks.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 68 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,200 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Tool Misuse · line 384
    Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
    Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
  • medium Excessive Agency · line 251
    Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution.
    Fix: Restrict tool access to only the tools required for the skill's stated purpose. Use an explicit allowlist rather than granting blanket access.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00068 $0.06200
Opus 5.5 $0.00027 $0.02480
Sonnet 5.5 $0.00014 $0.01240
Haiku 4.5 $0.00007 $0.00620

Measured 24d ago against content hash 444de268f0d4, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

tasks scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

sdk/cloud/catalog/skills/tasks/SKILL.md · 414 lines

How it starts

The opening of the file, as written. The whole thing — 414 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Tasks

Use this skill to drive the workspace Kanban end-to-end. Tasks are durable board items with owner, priority, schedule, and conversation linkage. Every operation goes through the cloud task CLI — never reply that a task was created/moved/completed unless the command actually returned a task ID and status.

⛔ Hard rules — delegation discipline

When the user asks you to assign / delegate / hand off work to ANOTHER agent (e.g. "create kanban tasks and assign to @research-agent", "give this to Bob"):

  1. Call cloud task create --assignee-name <agent> (or --assignee-id). That is the ONLY legitimate delegation path. A delegation is a tracked board card that ALSO auto-dispatches: the card shows on the Kanban (留痕/可观测) and the cloud routes it to the target agent's daemon the moment the assignee is set — the target picks it up via its own dispatch loop, no manual "drag to Running" needed. (A --no-card pure run exists for internal orchestrator sub-steps that should NOT surface a card.)
  2. For a delegation-only request, stop after reporting the returned IDs / titles. If the user also requested orchestration, follow-through, or result collection, continue read-only status/result collection with bounded waits as described below. Never duplicate the assignee's work yourself.
  3. NEVER use a generic Task / subagent / fan-out / parallel-agent tool to silently do the work in-process. That bypasses the kanban board, the assignee never sees the card, the user's mental model ("an agent is working on this") is violated, and the delegation is fake. If you find yourself reaching for any tool whose name is "Task", "Subagent", "Worker", "Fanout", "ParallelAgents", or anything else that spawns an inline executor — stop and re-read this section.
  4. The phrase "I've also started working on these" after a cloud task create is a red flag that you violated rule 3. The correct phrase is "Tasks created and assigned. @research-agent will pick up the cards."

Read the full file on GitHub · 414 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 24d ago Changed · +15 lines 444de268f0d4
  2. 1mo ago First seen · 399 lines · 68 tokens per session scan A d7a297f424d2

Subscribe to this mod's changes

tasks is a skill published in the GitHub repository Prismer-AI/PrismerCloud (1,363 stars, last pushed yesterday), licensed MIT. It adds 68 tokens to every session and 6,200 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.