Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add trapstreet/trapstreet-skills --skill trapstreet-task-scaffoldgit clone --depth 1 https://github.com/trapstreet/trapstreet-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/trapstreet/trapstreet-skills/trapstreet-task-scaffold)<a href="https://agentmods.dev/skills/trapstreet/trapstreet-skills/trapstreet-task-scaffold"><img src="https://agentmods.dev/badge/skills/trapstreet/trapstreet-skills/trapstreet-task-scaffold/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/trapstreet/trapstreet-skills/trapstreet-task-scaffold"><img src="https://agentmods.dev/badge/skills/trapstreet/trapstreet-skills/trapstreet-task-scaffold.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00231 | $0.03896 |
| Opus 5 | $0.00115 | $0.01948 |
| Sonnet 5 | $0.00046 | $0.00779 |
| Haiku 4.5 | $0.00023 | $0.00390 |
Grade A, and why
trapstreet-task-scaffold scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.
trapstreet-task-scaffold
Scaffolds a new task directory in trapstreet-tasks and guides the design
decisions that make a task actually good -- discriminating, hard to game,
legally sound, and consistent with a real ground-truth pipeline.
Sister skill to trapstreet-solution-scaffold, which does the reverse
(build a solution against an existing task).
Read this first, honestly: unlike solution scaffolding, task design is not fully mechanizable. The file layout, manifest contracts, and aggregation logic are the same every time and the scaffold script writes them for you. Whether the task is actually good -- whether it measures something real, whether it resists gaming, whether the ground truth is sound -- depends on understanding the specific agent/skill/domain being tested, and that part is an interview + judgment call, not a template fill.
And the second thing to know: intuitions about what makes a task hard
are unreliable, so the workflow below is built to find that out early and
cheaply -- probe one question before authoring a set, and never conclude
from a single run. references/difficulty-design.md and
references/calibration.md are the two files that decide whether the
finished task discriminates; the rest is craft around them.
Ground rules
- Never push to the shared task repo, and never register/publish a task on trapstreet.run,
without the user's explicit go-ahead on that specific push/publish -- same weight as
trapstreet-solution-scaffold's submit rule. Agreeing to earlier steps (case design, scoring logic) is not consent to publish; ask again at that specific moment. - Default to local-only whenever the legal/IP question (interview step 5) is unresolved.
Build and test the task fully -- nothing about that requires a public remote -- but don't
git pushuntil the question is actually answered (seereferences/legal-ip-checklist.md).
Before writing anything: interview
- What does the agent/skill actually do, concretely? Not "a code review skill" but "given a diff, flags likely bugs with a file/line/ description." The task's I/O contract should mirror the real thing this tool is used for -- don't design a task that only tests a narrow slice of what the tool claims to do, or one so different from its real usage that good performance here doesn't predict good performance there.
- What does "correct" mean, concretely, and who would disagree? If two competent humans could reasonably disagree on whether an answer is right, that's a sign the scoring needs either a very carefully curated rubric or a different, more objective framing of the task.
- What is supposed to make this hard, and is that thing real? Answer
in the two quantities that predict the score: H*, the minimum
number of effective actions the task requires, and s, the layers of
nested sub-goals and conditional branches. Performance falls off
non-linearly in s with a sharp knee; the intuitive answers (harder
arithmetic, defects a human would be slow to spot, capability gates a
shell can synthesise) sit on the flat part and moved a bare harness not
at all. Read
references/difficulty-design.mdbefore answering -- it is the difference between a task that discriminates and one everyone passes. Then answer a third question it raises: what is in the material? H* and s describe the procedure; they say nothing about whether the answers are sitting in the document as plain text. Three probe rounds on one task raised depth and horizon and moved a 20/20 ceiling not at all; changing what the document contains broke it on the first attempt. And if the task puts a set of options in front of the solver -- a tool menu, a skill catalog, retrieval candidates -- read "When the task varies a candidate set" in the same file first. Accuracy at N=8 and N=26 are not comparable without a chance correction or a size-matched control; distractors picked by hand make confusability a claim about the author rather than a property of the task; and a control arm matched on the countable thing can be unmatched on the thing that actually fires. All three shipped in one task before being caught, and the third was about three quarters of its headline number. Then ask the mirror question -- what will make a bad solution score badly? -- and readreferences/making-a-task-discriminate.md, which is where four case sets that separated nothing are written up. Its rule is that disorder is recoverable and absence is not: a capable model repairs a garbled input, so grading how well something survived grades the repair. And verify the failure is actually present before authoring a single case -- one task shipped 27 cases and returned 270 scores of 1.0. - Where does ground truth come from? Computed from a seed (no answer
for anyone to get wrong, and leakage is impossible by construction),
real historical data (leakage risk, but credible), or hand-authored
(no leakage risk, but needs real effort to feel authentic)? Read
references/ground-truth-sourcing.mdbefore deciding -- this is one of the highest-leverage decisions in the whole task, and the computed option is under-used. - Does any candidate source material raise a legal/IP/liability
question? Read
references/legal-ip-checklist.mdand answer its questions explicitly before writing a single case intogold.cases.json. If the answer is unclear, default to building the task locally (gitignored) and resolve the question before ever pushing it to a public remote -- not after. - How many cases, and how are they organized into categories/tags?
Enough to give real signal (a handful of cases barely discriminates
anything), but every case should be worth its inclusion -- don't pad
the count with near-duplicates of an already-covered pattern. "Near-
duplicate" is measurable rather than a matter of taste, so write the
per-capability budget down here and check it against the runs later --
"Budget cases by capability" in
references/difficulty-design.mdhas the allocation rule and the two checks, one of which passes on a set whose 22 items span four independent directions. Plan on sourcing roughly three times what you intend to ship: SWE-bench Verified discarded 68.3% of naturally sourced candidates under review, and the probe below will discard some of yours.
What ships with it
10 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- README.md 3.3 KB
- references/calibration.md 9.9 KB
- references/difficulty-design.md 22 KB
- references/ground-truth-sourcing.md 8.7 KB
- references/legal-ip-checklist.md 2.4 KB
- references/making-a-task-discriminate.md 11 KB
- references/scoring-design.md 10 KB
- references/traptask-contract.md 6.0 KB
- scripts/scaffold_task.py 22 KB runs code
- scripts/validate_task.py 8.1 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 274 lines · 231 tokens per session scan A 130da2cb7009
trapstreet-task-scaffold is a skill published in the GitHub repository trapstreet/trapstreet-skills (5 stars, last pushed 16d ago), licensed MIT. It adds 231 tokens to every session and 3,896 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agent-evaluation-v2
Agent Evaluation workflow skill. Use this skill when the user needs Testing and benchmarking LLM agents including behavioral testing, and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
agent-evaluation
Agent Evaluation workflow skill. Use this skill when the user needs Testing and benchmarking LLM agents including behavioral testing, and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
agent-evaluation-v3
Agent Evaluation workflow skill. Use this skill when the user needs Testing and benchmarking LLM agents including behavioral testing, and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
systematic-debugging
4-phase root cause debugging: understand bugs before fixing.
mem0-test-integration
Verify a Mem0 integration produced by /mem0-integrate. Runs in the same workspace on the same branch (loose coupling) — installs dependencies, runs the repo's native test suite, then exercises a real end-to-end smoke flow against the user's API key. Produces a scorecard. TRIGGER when: user has just run /mem0-integrate…
promptfoo-provider-setup
Configure promptfoo providers or redteam targets for hosted models, live HTTP APIs, Python/JavaScript local scripts, agent SDKs, or multi-input systems. Use when connecting promptfoo to the system under test, mapping vars, auth env vars, request bodies, response transforms, or static-code-derived provider wrappers. Do…