Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Stanshy/AgentHub --skill task-approvegit clone --depth 1 https://github.com/Stanshy/AgentHubWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/stanshy/agenthub/task-approve)<a href="https://agentmods.dev/skills/stanshy/agenthub/task-approve"><img src="https://agentmods.dev/badge/skills/stanshy/agenthub/task-approve/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/stanshy/agenthub/task-approve"><img src="https://agentmods.dev/badge/skills/stanshy/agenthub/task-approve.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00014 | $0.00984 |
| Opus 5.5 | $0.00006 | $0.00394 |
| Sonnet 5.5 | $0.00003 | $0.00197 |
| Haiku 4.5 | $0.00001 | $0.00098 |
Grade A, and why
task-approve scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
任務審核通過
L1 Review 通過後呼叫,將狀態從 in_review 改為 done。
使用方式
/task-approve <task-id> [備註]
參數
$0: 任務 ID(如T5)$ARGUMENTS: 完整參數(含備註)
格式規範(系統解析依賴,務必遵守)
.tasks/ 狀態欄位
| 狀態值 | 說明 |
|---|---|
done |
L1 審核通過 |
dev-plan 第 10 節「結果」欄位(第 3 欄)
| 結果值 | 對應系統狀態 | 說明 |
|---|---|---|
✅ 完成 |
done | 審核通過 |
執行步驟
- 找到對應的任務檔案(支援 Sprint 子目錄):
使用 Glob tool 搜尋
.tasks/**/$0-*.md,若無結果再搜尋.tasks/**/$0.md。 取得檔案路徑後用 Read tool 讀取內容。
任務檔案可能在
.tasks/sprint-{N}/T5-xxx.md,不再只在.tasks/根目錄。
-
取得真實時間(必要,不可跳過): !
node -e "console.log(new Date().toISOString())"⚠️ 禁止自行編造時間。Agent 不知道真實時間,必須透過上述指令取得。將輸出存為變數
$NOW供後續步驟使用。 -
更新找到的任務檔案:
- 將
| 狀態 | ... |改為| 狀態 | done | - 將
| 完工時間 | ... |改為| 完工時間 | $NOW | - 若找不到
| 完工時間 |欄位,在| 建立時間 |行之後插入| 完工時間 | $NOW |
- 將
-
事件紀錄(必要,不可跳過):在
## 事件紀錄區塊底部 append:### $NOW — 狀態變更 → done L1 審核通過。{備註} -
Git Merge(並行任務)/ 確認(循序任務): 讀取任務檔的
| 並行組 |欄位:若
並行組 = —(循序任務):- code 已在 sprint-{N},無需 merge
- 輸出:
📌 循序任務,code 已在 sprint-{N}
若
並行組 = A/B/C...(並行任務):- 取得 sprint 編號(從任務檔 Sprint 欄位)
- 執行 merge:
git checkout sprint-{N} git merge --no-ff task/s{N}-$0-{slug} -m "feat($0): {任務標題}" git branch -d task/s{N}-$0-{slug} - 若 merge 有衝突 → 停止,列出衝突檔案,由人工解決後繼續
- 輸出:
🔀 task/s{N}-$0-{slug} 已 merge 進 sprint-{N},branch 已刪除
-
找到當前 dev-plan: 使用 Glob tool 搜尋
proposal/sprint*-dev-plan.md,取最新一份用 Read tool 讀取。 -
在 dev-plan 第 10 節「任務完成紀錄」表格,找到對應任務行並更新:
| $0 | {YYYY-MM-DD} | ✅ 完成 | {備註} |
- 輸出確認:
✅ $0 審核通過,狀態已更新為 done
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 85 lines · 14 tokens per session scan A 4a3fb66b53ef
task-approve is a skill published in the GitHub repository Stanshy/AgentHub (204 stars, last pushed 6mo ago), licensed MIT. It adds 14 tokens to every session and 984 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
project-setup-info-local
Comprehensive setup steps to help the user create complete project structures in a VS Code workspace; this tool is designed for full project initialization and scaffolding, not for creating individual files. When to use this tool: user wants to create a new complete project from scratch; setting up entire project…
md-hive-sync
Munder Difflin hive sync — runs the start-of-task hive protocol steps: reads memory.md, checks inbox/ for new messages, and reminds you to record durable facts in memory.md and write coordination files before ending. Use when asked to "sync with the hive", "check my inbox", "hive status", or "hive sync". Proactively…
comet-native
A workflow for managing Native changes in Comet, where requirements, progress, and acceptance results are saved in project files. It uses the Comet command-line runtime to move through defined work stages.
comet-github-idea-to-issue
A workflow for turning a local idea, bug observation, or improvement proposal into a focused GitHub Issue draft. GitHub Issues are shared records for bugs, features, questions, and maintenance work.
generate-rfcs
Break the PRD into sequenced implementation RFCs under RFCs/ with an RFCS.md index, then cold-read each RFC for gaps.
create-request
Create, update, or scan per-task request tickets for progress tracking. These are date-prefixed non-lifecycle docs under requests/, NOT feature-level requirements (use /req-analyze for those). Use when: tracking task progress, updating completion status, scanning incomplete requests, checking request status dashboard.…