Skip to content
Back to skills

Pm Tasks Core

ASecurity

Core extraction + vocabulary for the @llodev/pm-tasks-* family. Use when working with any pm-tasks-<tool> adapter (Trello, Asana, etc.) — provides Phases 1–3 (identify input, extract structure, build the generic card) plus the canonical CRUD vocabulary (task.create, checklist.check, task.close, task.due-date.set, task.assignee.add, task.comment.add, task.move, task.parent.set, task.estimate.set, task.sprint.set) consumed by adapters. Also defines autonomous-mode contract (sentinels, allowlist...

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 4, 2026
ai-agentstypescriptgogit

Works with

  • cursor
  • cli

Security analysis

A100/100

Pro scans all 20 files and shows the line behind each finding

Scanned September 4, 2026

npx -y skills add llodev/skills --skill pm-tasks-core --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Pm Tasks Core?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Pm Tasks Core
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/llodev-pm-tasks-core/badge)](https://www.skillsdirectory.com/skills/llodev-pm-tasks-core)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: pm-tasks-core
description: >-
  Core extraction + vocabulary for the @llodev/pm-tasks-* family. Use when
  working with any pm-tasks-<tool> adapter (Trello, Asana, etc.) — provides
  Phases 1–3 (identify input, extract structure, build the generic card) plus
  the canonical CRUD vocabulary (task.create, checklist.check, task.close,
  task.due-date.set, task.assignee.add, task.comment.add, task.move,
  task.parent.set, task.estimate.set, task.sprint.set) consumed by adapters.
  Also defines autonomous-mode contract (sentinels, allowlist, scope, audit log)
  and the shared init UX. Triggered indirectly by any prompt that an adapter
  handles (e.g. "create Trello card", "publish plan to Asana", "[autonomous]
  create task"). Do NOT activate alone — it has no tool-specific formatting.
license: MIT
metadata:
  version: 1.16.0
  tags:
    - agent-skill
    - plan-to-tasks
    - pm-tools
  family: pm-tasks
  role: core
compatibility:
  agents:
    - claude-code
    - cursor
    - codex
    - windsurf
    - cline
    - roo-code
---

# pm-tasks-core

Shared core for all `pm-tasks-<tool>` adapters. Defines the extraction phases, the generic-card structure, the CRUD vocabulary, the autonomous-mode contract, the configuration lookup rules, and the audit-log format. Adapters reference this skill by path — no formal dependency mechanism in the spec.

## Routing

Adapters invoke this skill BEFORE applying their tool-specific formatting. The exact pointer is documented in [`references/contract.md`](references/contract.md).

## Phases

| Phase | Purpose                                                      | Reference                                                  |
| ----- | ------------------------------------------------------------ | ---------------------------------------------------------- |
| 1     | Identify the input (plan file vs inline paste vs implicit)   | [`references/contract.md`](references/contract.md) § 1     |
| 2     | Extract sections by intent (goal, prereqs, tasks, done-when) | [`references/contract.md`](references/contract.md) § 2     |
| 2.5   | Anti-patterns gate                                           | [`anti-patterns/core.md`](anti-patterns/core.md)           |
| 3     | Build the generic card                                       | [`references/generic-card.md`](references/generic-card.md) |

Adapters then execute Phases 4+ per their own SKILL.md.

## CRUD vocabulary (verbs adapters implement)

See [`references/crud-vocabulary.md`](references/crud-vocabulary.md). Ten verbs: `task.create`, `checklist.check`, `task.close`, `task.due-date.set`, `task.assignee.add`, `task.comment.add`, `task.move`, `task.parent.set` (adapter-optional), `task.estimate.set` (adapter-optional), `task.sprint.set` (adapter-optional; Linear first supporter). All idempotent (with `clientToken` rules for non-natural cases).

## Autonomous mode

See [`references/autonomous-mode.md`](references/autonomous-mode.md). Activated only by sentinel `[autonomous]` / `--auto` / env `LLODEV_PM_TASKS_AUTONOMOUS=1`. Requires explicit allowlist + scope + rate limit in the tool's config. Never inferred. Agent-authored copy (commits, PRs, comments) follows the workspace narration language — see [Narration language](#narration-language).

## Narration language

**Narration language.** When `.<tool>.json` sets `locale`, all agent-authored narration — comments the agent writes, autonomous-mode commit and PR copy, code comments, and audit/CLI free-text — MUST be in that locale's language. The **plan's** language still governs **task content** (title, description, checklist items); these are separate concerns. If `locale` is unset, `pm-tasks-core-doctor` (`C-LANG-1`) warns and narration defaults to English.

## Configuration

Lookup order: `<git-root>/.<tool>.json` → `~/.config/llodev/pm-tasks/<tool>.json` → abort. Secrets NEVER in JSON (env vars / OS keychain only).

## Audit log

Append-only JSONL at `~/.local/share/llodev/pm-tasks/<tool>/audit.log`. Schema in [`references/audit-log-format.md`](references/audit-log-format.md). Doubles as the lookup index for `<task-ref>` resolution.

## Init helper

Adapters expose `npx @llodev/pm-tasks-<tool> init`. Shared UX in [`references/init-ux.md`](references/init-ux.md). Implementation library at `@llodev/pm-tasks-core/init-lib` (TypeScript source under `./src/init-lib.ts`; compiled to `./dist/init-lib.js`).

## Health check (doctor)

`pm-tasks-core-doctor` validates a workspace config, autonomous allowlist, audit writability, and network reach. Check matrix and exit codes in [`references/doctor.md`](references/doctor.md) — `pm-tasks-core-doctor` check catalog + exit codes.

## Standalone fallback

This skill is not useful without an adapter. If activated alone, tell the user to install at least one `pm-tasks-<tool>` package.

Files in this skill

  • CHANGELOG.md26.5 KB
  • LICENSE1.1 KB
  • README.md3.7 KB
  • SKILL.md4.7 KB
  • anti-patterns/core.md3.5 KB
  • docs/i18n/README.es-ES.md3.6 KB
  • docs/i18n/README.pt-BR.md3.6 KB
  • i18n/en-US.json1.3 KB
  • i18n/es-ES.json1.5 KB
  • i18n/pt-BR.json1.4 KB
  • package.json2.7 KB
  • references/agent-agnostic-lint.md5.8 KB
  • references/attribution.md4.3 KB
  • references/audit-log-format.md3.9 KB
  • references/autonomous-mode.md6 KB
  • references/contract.md9.7 KB
  • references/crud-vocabulary.md5.7 KB
  • references/doctor.md8.7 KB
  • references/generic-card.md5.5 KB
  • references/init-ux.md4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.