agentmods.dev

spec-to-board

spec-to-board is a skill for Claude Code, Codex from UrRhb/agentflow. It costs 37 tokens per session (1,292 once invoked), scanned C, original, MIT.

A procedure that turns a product specification into a Kanban board—a board of work items grouped by progress—with small tasks, dependencies, and acceptance criteria.

In plain words
What is it for?
Use it to read or create a SPEC.md, inspect project conventions and files, set up a project, and create tasks in Asana or another supported board system.
Why use it?
It breaks a broad specification into trackable work and adapts the board setup to the project-management tool that is available.

Skill for Claude CodeCodex

Part of the agentflow plugin — 6 skills, 4 agents, 1 MCP server shipped together

not rated 4 5mo ago C scan 37 tokens original MIT
View the source file UrRhb/agentflow
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/urrhb/agentflow/spec-to-board
Any agent
npx skills add UrRhb/agentflow --skill spec-to-board
Clone the repo
git clone --depth 1 https://github.com/UrRhb/agentflow

Made for: Claude Code, Codex.

Or install agentflow, the plugin that ships this one along with the rest of its 6 skills, 4 agents, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for spec-to-board

README.md
[![agentmods](https://agentmods.dev/badge/skills/urrhb/agentflow/spec-to-board.svg)](https://agentmods.dev/skills/urrhb/agentflow/spec-to-board)
Your own site
<a href="https://agentmods.dev/skills/urrhb/agentflow/spec-to-board"><img src="https://agentmods.dev/badge/skills/urrhb/agentflow/spec-to-board.svg" alt="Measured on agentmods" height="20"></a>
Per session 37 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,292 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 2 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00037 $0.01292
Opus 5 $0.00018 $0.00646
Sonnet 5 $0.00007 $0.00258
Haiku 4.5 $0.00004 $0.00129

Measured 5d ago against content hash 3d045c444ccf, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

spec-to-board scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

6. **Safety check**: All verification commands use only safe commands (npm, npx, node, curl localhost). No external URLs, no `rm -rf`, no `eval`, no `sudo`.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

6. **Safety check**: All verification commands use only safe commands (npm, npx, node, curl localhost). No external URLs, no `rm -rf`, no `eval`, no `sudo`.
Origin

Copies of this mod

1 near-identical copy found in the catalogue:

plugin/skills/spec-to-board/SKILL.md · 173 lines

How it starts

The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.

/spec-to-board

Convert a product spec into a fully structured Kanban project board for the AgentFlow pipeline.

PM Tool Detection

This skill works with any supported PM tool. It detects which MCP is available:

  • If Asana MCP connected: use Asana operations
  • If GitHub Projects MCP connected: use GitHub Projects operations (future)
  • If none: report error and suggest configuring MCP

The skill uses adapter-neutral language. See core/adapters/interface.md for mapping.

Prerequisites

Before running, you need:

  1. A SPEC.md file (or a product idea to brainstorm into one)
  2. Access to your PM tool's MCP integration (e.g., Asana MCP)
  3. The AgentFlow conventions: read conventions.md

Process

Phase 1: Spec Acquisition

If a SPEC.md path is provided as argument, read it.

If no argument provided, ask the user:

  • "What product/feature are you building?"
  • Help create a SPEC.md
  • Save to a docs/specs/ directory

Phase 2: Project Setup

  1. Determine project code: Check conventions.md for existing codes. If new project, ask user for 3-letter code.

  2. Read the project's file structure:

    Glob: **/*.ts, **/*.tsx, **/*.js pattern in the project directory

    This gives predicted files context for decomposition.

  3. Read package.json: Get current dependencies (needed for research trigger evaluation).

  4. Select model cost profile: Ask the user: "Which Claude model will workers use? (sonnet/opus)" This sets the cost profile in conventions.md (affects cost ceilings and guardrails).

Phase 3: Decompose

Read the decomposition prompt: prompts/decompose.md

For each phase/section in the SPEC.md:

  1. Break into atomic tasks following the decomposition rules
  2. Map dependencies between tasks
  3. Evaluate research triggers per task
  4. Detect and resolve shared-file conflicts

Phase 4: Validate

Run the decomposition validator (from decompose.md) BEFORE creating anything in the PM tool:

  1. Rubric check: All 9 fields present per task
  2. Topological sort: No circular dependencies
  3. File conflict check: Parallel tasks don't share files
  4. Atomicity check: No task modifies > 5 files
  5. Verification command check: All commands are valid bash
  6. Safety check: All verification commands use only safe commands (npm, npx, node, curl localhost). No external URLs, no rm -rf, no eval, no sudo.

Read the full file on GitHub · 173 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 173 lines · 37 tokens per session scan C 3d045c444ccf

Subscribe to this mod's changes

spec-to-board is a skill published in the GitHub repository UrRhb/agentflow (4 stars, last pushed 5mo ago), licensed MIT. It adds 37 tokens to every session and 1,292 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

PlanningProject management
Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

insight-error-page

Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…

vercel/next.js · 83 tokens