import

A workflow for importing a tasks.md file into the Coco tracker as an epic, a larger work item containing related tasks and dependencies. It can also create matching issues in the configured issue tracker.

In plain words
What is it for?
Use it after completing tasks.md for a feature, when the project has Coco configuration and the tasks need to become tracked work.
Why use it?
It connects a written task plan to the tracker so dependencies and progress can be managed. It also avoids recreating each task manually in the issue tracker.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/skullninja/coco-workflow/import
Any agent
npx skills add skullninja/coco-workflow --skill import
Clone the repo
git clone --depth 1 https://github.com/skullninja/coco-workflow

Made for: Claude Code, Codex.

Per session 26 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,831 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00026 $0.02831
Opus 5 $0.00013 $0.01416
Sonnet 5 $0.00005 $0.00566
Haiku 4.5 $0.00003 $0.00283

Measured 2d ago against content hash 554389ee8212, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

import scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/import/SKILL.md · 268 lines

How it starts

The opening of the file, as written. The whole thing — 268 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Coco Import Skill

Import a tasks.md into the coco tracker and optionally create matching issues in the configured issue tracker.

When to Use

  • Importing tasks as part of the coco pipeline
  • Called by /coco:phase (Step D) or /coco:planning-session tactical
  • When tasks.md exists in specs/{feature}/ and needs to be loaded into the tracker

Prerequisites: tasks.md must exist. If missing, use the tasks skill first.

Prerequisites

  • Completed specs/{feature}/tasks.md with sub-phases and dependency info
  • .coco/config.yaml exists with project configuration

Setup

  1. Read .coco/config.yaml for project.specs_dir and issue_tracker config.
  2. Determine the current feature by:
    • Checking the current git branch name
    • Strip the feature/ prefix (or whatever pr.branch.feature_prefix is) from the branch name
    • Looking for the matching directory in {specs_dir}/{stripped-name}/
    • Or from conversation context if a feature was recently discussed
  3. Read {specs_dir}/{feature}/tasks.md (required). If missing, instruct user to use the tasks skill first.
  4. Each tracker command is a separate Bash tool call: coco-tracker <command> [args]

Execution

Step 1: Parse tasks.md

Extract:

  1. Feature name from the # Tasks: header
  2. Sub-Phases -- each ## Sub-Phase N: section becomes a tracker task
  3. Parallel markers -- [P] tasks within a sub-phase
  4. Dependencies -- parse "Dependencies & Execution Order" section
  5. **owns_files**: annotations -- file globs per sub-phase (optional)
  6. **test_plan**: annotations -- FR-### IDs and levels per sub-phase (optional; none means "no tests, decided")

Step 2: Create Tracker Epic

coco-tracker epic-create "{feature-name}"

Step 3: Create Tracker Tasks (one per sub-phase)

IMPORTANT: All coco-tracker create arguments MUST be single-line. Never put literal newlines inside --description, --title, or --metadata values. Use semicolons or commas to separate items within a description. Put each command on one line (no \ continuations).

Read the full file on GitHub · 268 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 268 lines · 26 tokens per session scan A 554389ee8212

Subscribe to this mod's changes

import is a skill published in the GitHub repository skullninja/coco-workflow (7 stars, last pushed 2d ago), licensed MIT. It adds 26 tokens to every session and 2,831 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

effort-estimate

When the user needs accurate effort estimates for tasks, features, or projects. Use when the user says "how long will this take," "effort estimate," "estimate this," "scope this," "size this," "time estimate," "sprint planning," or when planning work. Unlike generic estimates, this skill calibrates against YOUR actual…

irfad7/claude-power-skills · 90 tokens

council-review

Perform a rigorous Carmack Council code review. Use when explicitly asked to review code, do a "council review", "carmack review", or invoke /council-review. Carmack's philosophy chairs a council of domain experts — Troy Hunt (security), Martin Fowler (refactoring), Kent C. Dodds (frontend), Matteo Collina (Node.js)…

SamJHudson01/Carmack-Council · 166 tokens

council-plan

Architect a feature with the Carmack Council before writing code. Use when explicitly asked to plan a feature, do a "council plan", "carmack plan", or invoke /council-plan. Carmack's philosophy chairs a council of domain experts — Troy Hunt (security), Martin Fowler (refactoring), Kent C. Dodds (frontend), Matteo…

SamJHudson01/Carmack-Council · 165 tokens

test-architect

Map testable surfaces, audit existing tests for quality, and write test specifications that prevent AI shortcuts. Use when asked to "audit tests", "specify tests", "test architect", "map test coverage", or invoke /test-architect. Two modes — audit (evaluate existing tests against Beck's principles) and specify (write…

SamJHudson01/Carmack-Council · 110 tokens

spec-writer

Generate structured software specifications for features, bug fixes, and products. Use when the user wants to create a spec, PRD, feature brief, requirements document, or when starting any new implementation that needs a specification first. Invoke via /spec-writer or when the user says "write a spec", "spec this…

SamJHudson01/Carmack-Council · 125 tokens

council-implement

Execute a Carmack Council plan task by task. Use when explicitly asked to implement a plan, do a "council implement", "carmack implement", "council build", or invoke /council-implement. Reads the output of /council-plan and builds each task sequentially, loading the relevant expert's reference document per task.…

SamJHudson01/Carmack-Council · 119 tokens