Skip to content
Back to skills

Todo Scan

ASecurity

Collect TODO/FIXME/HACK comments across the codebase into a triaged, actionable backlog

  • 3 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 3, 2026
ai-agentsgonode

Works with

  • cli

Security analysis

A100/100

Scanned September 3, 2026

npx -y skills add black141312/ada --skill todo-scan --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Todo Scan?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Todo Scan
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/black141312-todo-scan/badge)](https://www.skillsdirectory.com/skills/black141312-todo-scan)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: todo-scan
description: Collect TODO/FIXME/HACK comments across the codebase into a triaged, actionable backlog
category: productivity
---

# Todo Scan

Reach for this when you want a single inventory of the inline debt scattered through code comments, turned into a backlog you can prioritize instead of a pile of grep hits.

1. Grep the tree for the marker set: `TODO`, `FIXME`, `HACK`, `XXX`, `BUG`, `OPTIMIZE` (case-insensitive), excluding `node_modules`, `vendor`, build, and lockfiles.
2. For each hit capture file path, line number, the marker type, and the full comment text plus a line or two of surrounding context.
3. Normalize duplicates and multi-line comments into one entry each; drop commented-out code and false positives (e.g. the word "todo" in a string or doc).
4. Tag every entry with a rough severity (blocker / should-fix / nice-to-have) and a guessed area (auth, db, ui, build, tests) from the path.
5. Sort by severity then area, and emit a Markdown table: marker, severity, location (`path:line`), summary.
6. Surface any entry that names a person, ticket id, or a date that has already passed — those are the highest-signal items.

## Rules
- Report `path:line` for every item so it is click-to-open; never paraphrase a location.
- Do not edit, resolve, or delete the comments — this skill only inventories them.
- Skip generated/vendored directories and minified files or the list drowns in noise.
- Distinguish marker types in output; a `FIXME` is not the same priority as an aspirational `TODO`.
- If the scan returns more than ~50 items, summarize counts per area first, then list the top items rather than dumping everything.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.