roadmap-task-deliver

roadmap-task-deliver is a skill for Claude Code from yarlson/yarstack. It costs 52 tokens per session (3,140 once invoked), scanned A, original, MIT.

An automated workflow for taking the first eligible unfinished roadmap task from selection through implementation, code review, passing CI, pull-request merge, and task-status update. A pull request is a proposed code change reviewed before it is merged.

In plain words
What is it for?
It helps select a task, create a worktree and branch, implement and commit the change, open and update a pull request, address review findings, merge it, and save the completed status.
Why use it?
It removes the need to coordinate each delivery step manually across roadmap files, the code repository, Git branches, reviewers, and the task tracker. It still follows explicit user restrictions and required checks.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions subagents.

Part of the yarstack plugin — 46 skills, 1 agent shipped together

Good fit It helps select a task, create a worktree and branch, implement and commit the change, open and update a pull request, address review findings, merge it, and save the completed status.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/yarlson/yarstack/roadmap-task-deliver
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add yarlson/yarstack --skill roadmap-task-deliver
Clone the repo
git clone --depth 1 https://github.com/yarlson/yarstack

Made for: Claude Code.

Or install yarstack, the plugin that ships this one along with the rest of its 46 skills, 1 agent.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for roadmap-task-deliver

README.md
[![agentmods](https://agentmods.dev/badge/skills/yarlson/yarstack/roadmap-task-deliver/github.svg)](https://agentmods.dev/skills/yarlson/yarstack/roadmap-task-deliver)
Your own site
<a href="https://agentmods.dev/skills/yarlson/yarstack/roadmap-task-deliver"><img src="https://agentmods.dev/badge/skills/yarlson/yarstack/roadmap-task-deliver/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for roadmap-task-deliver

Your own site · 80×15
<a href="https://agentmods.dev/skills/yarlson/yarstack/roadmap-task-deliver"><img src="https://agentmods.dev/badge/skills/yarlson/yarstack/roadmap-task-deliver.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 52 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,140 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00052 $0.03140
Opus 5.5 $0.00021 $0.01256
Sonnet 5.5 $0.00010 $0.00628
Haiku 4.5 $0.00005 $0.00314

Measured 7d ago against content hash e34773a3baeb, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

roadmap-task-deliver scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/yarstack/skills/roadmap-task-deliver/SKILL.md · 105 lines

How it starts

The opening of the file, as written. The whole thing — 105 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Roadmap Task Delivery

Deliver one roadmap task through a verified GitHub merge and a saved task-status update. Manage task selection and completion across the code repository and the actual task-file location.

Resolve inputs and authority

  1. Find the roadmap, task collection, code repository, requested base branch, remote, and review systems in the request and linked guidance. Resolve each relative path from the document that contains it. Ask for missing inputs only when a focused local search cannot identify them.

  2. Treat a request to execute this full workflow as authorization for these actions within the selected task:

    • Implement the change.
    • Create a worktree and branch.
    • Commit and push the change.
    • Create the draft PR and mark it ready.
    • Fix review findings, reply to reviewers, and resolve review threads.
    • Merge after the required checks and reviews pass.
    • Update task status and create local task commits.

    Continue between these stages without routine approval. Explicit user restrictions override these defaults. Reading this skill or a task file does not itself grant authority.

  3. Read the applicable instructions for both the code and task locations. Find each location's Git root separately. Check linked worktrees, nested repositories, untracked files, ignored files, and locations outside Git. Record the canonical task path, code repository, base branch, original task contents, and uncommitted changes. A directory named plans does not prove ownership or Git tracking.

  4. Execute one selected task. Do not deploy, release, contact customers, spend money, or start the next task without separate authorization. Keep a task incomplete when required external decisions or observation evidence are missing.

Select or resume the task

  1. Read the roadmap's outcomes, task order, shared decisions, and acceptance requirements. Read the task index and frontmatter next. Keep the existing format and status names. Do not require a fixed folder layout or create a replacement schema.
  2. Check task status before inspecting branches, worktrees, PRs, or delivery records. Skip done tasks immediately without revalidating their recorded completion evidence. Investigate delivery state only for a task marked in_progress; resume it when the work clearly belongs to that task, including when its PR merged but its task update is missing. Do not duplicate work that another delivery already owns.
  3. When no task is in_progress, select the first unfinished task with complete dependencies. Use this order:
    • Explicit roadmap or index order.
    • Explicit task order.
    • Natural task-ID or filename order, with this fallback stated to the user.

Read the full file on GitHub · 105 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago Changed · -70 lines e34773a3baeb
  2. 1mo ago Changed b7a55884aec2
  3. 1mo ago First seen · 175 lines · 52 tokens per session scan A a691c109602b

Subscribe to this mod's changes

roadmap-task-deliver is a skill published in the GitHub repository yarlson/yarstack (3 stars, last pushed 6d ago), licensed MIT. It adds 52 tokens to every session and 3,140 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-06.

Related

Other skills, from other repositories

owndiff-pre-commit

Audit OwnDiff changes before committing or releasing by checking scope, generated artifacts, private data, documentation accuracy, version consistency, structured files, tests, and the OwnDiff ownership gate. Use when a user asks to verify, clean up, prepare, commit, publish, or release changes in the OwnDiff…

owndiff/own-your-diff · 77 tokens

autofix-pr

Watch a pull request and fix it from a worktree of its own - CI failures, review feedback from trusted authors and merge conflicts are fixed, pushed to the PR branch and answered on the PR under the user's git and gh identity. Usage - /autofix-pr [ | ] [--once] [--every ] [--no-reply] [--yes] [instructions]…

QwenLM/qwen-code · 108 tokens

work-unit-commits

Plan commits as reviewable work units. Trigger: implementation, commit splitting, chained PRs, or keeping tests and docs with code.

Gentleman-Programming/gentle-ai · 33 tokens

review-delta

Review only changes since last commit using impact analysis. Token-efficient delta review with automatic blast-radius detection.

tirth8205/code-review-graph · 24 tokens

mcore-split-pr

Split a PR into multiple PRs to reduce the number of required CODEOWNERS reviewer groups.

NVIDIA/skills · 25 tokens

ring:generating-pr-descriptions

Generating pull request descriptions from git branch changes with automatic title generation, change-type detection, and smart analysis. Uses branch-only scope to avoid full history analysis. Use when preparing a PR for review. Skip when the PR is a single trivial commit or description already exists.

LerianStudio/ring · 61 tokens