Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Coding Agent Task Scoping

ASecurity

Scope an autonomous AI coding agent task so it is well-bounded, recoverable, and matched to the right model tier before it runs. Reach for this skill before any long, unsupervised, or multi-step agentic run — a poorly scoped task on a frontier model is both expensive and hard to debug.

7 stars
0 votes
0 copies
0 views
Added 9/23/2026
ai-agentsapidatabase

Works with

api

Security Analysis

A100/100

Scanned 9/23/2026

$npx -y skills add mcorbett51090/RavenClaude --skill coding-agent-task-scoping --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Coding Agent Task Scoping?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Coding Agent Task Scoping
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/mcorbett51090-coding-agent-task-scoping/badge)](https://www.skillsdirectory.com/skills/mcorbett51090-coding-agent-task-scoping)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: coding-agent-task-scoping
description: "Scope an autonomous AI coding agent task so it is well-bounded, recoverable, and matched to the right model tier before it runs. Reach for this skill before any long, unsupervised, or multi-step agentic run — a poorly scoped task on a frontier model is both expensive and hard to debug."
---

# Skill: Coding Agent Task Scoping

An autonomous coding agent run is not a chat turn. The task description, model tier, and recovery plan must be decided before the run starts — not after it has touched 40 files. This skill structures that pre-run decision.

## Step 0 — Is this task actually agent-appropriate?

Not every "I want to automate this" request benefits from an autonomous run. Run this quick check:

| Question | If YES | If NO |
|---|---|---|
| Can the task be done interactively in one supervised chat turn? | → Supervised chat, not an agent run | Continue |
| Does the task require reading many files the developer can't enumerate? | → Agent run appropriate | Supervised chat |
| Does the task require irreversible production actions (deploys, deletions, DB writes)? | → Mandatory human gate; see high-blast rule | Continue with caution |
| Can the task be decomposed into ≤ 5 well-defined sub-steps? | → Prefer sequential supervised turns | Agent run if steps are still complex |

## Step 1 — Define the task boundary

A well-scoped agent task has a clear **start state**, **end state**, and **scope envelope**:

```
Start state:  [what exists before the run: branch, file list, test state]
End state:    [what "done" looks like: tests pass, file changed, PR opened]
Scope envelope:
  - Repos in scope: [explicit list]
  - Files allowed to modify: [pattern or list]
  - Files NOT to touch: [explicit exclusions — migrations, infra, secrets]
  - External calls allowed: [none | read-only | specific APIs]
```

**Never leave the scope envelope open-ended.** "Refactor the whole codebase" is not a task boundary; "refactor the authentication module in `src/auth/` so all functions have type annotations, passing the existing test suite" is.

## Step 2 — Classify the blast radius

| Blast class | Definition | Model tier implication |
|---|---|---|
| Low blast | Reversible; touches only local files; no external state | Balanced default tier |
| Medium blast | PR opened or test suite modified; reversible via PR close | Balanced or frontier; reasoning level up |
| High blast | Database writes, deploy triggers, secret rotation, force-push | Frontier tier mandatory; human gate before execution |

High-blast tasks must have a **checkpoint plan**: what does the agent do if it encounters an unexpected state mid-run? Define the recovery path before starting.

## Step 3 — Select the model tier for the run

Apply the vendor-neutral tier logic:

1. **Low-blast, bounded task** — balanced default tier with reasoning level raised if needed (Codex).
2. **Medium-blast or multi-file refactor** — start at balanced default; upgrade to frontier only after a failed run at medium reasoning.
3. **High-blast or very long autonomous run** — frontier tier; human approval gate at the start and at each irreversible step.
4. **Long run that spans many files** — check context demand against `../context-window-planning/SKILL.md` first; chunking may be cheaper than a frontier model.

## Step 4 — Define the success criterion before running

The agent must be able to tell the developer when it is done. A testable criterion:

- **Code change:** "all tests in `src/auth/tests/` pass and `mypy src/auth/` exits 0"
- **PR creation:** "a PR is open against `main` with a description matching the task scope"
- **Analysis:** "a report file at `docs/audit.md` covers all files matching `src/**/*.py`"

Without a testable criterion, the agent will either run forever or produce an incomplete artifact with no way to know it is incomplete.

## Pitfalls

- Starting a high-blast run at the balanced tier because "it will probably be fine" — the cost of a wrong action on 40 files exceeds any model-cost savings.
- Leaving the scope envelope open ("just fix whatever you find") — the agent will touch files the developer didn't intend.
- Skipping the checkpoint plan on a high-blast task — mid-run failures are harder to recover from than pre-run planning is expensive.
- Treating a long run failure as a model-quality problem before checking task scope — most long-run failures are scope problems, not model problems.

## See also

- [`../../agents/codex-model-strategist.md`](../../agents/codex-model-strategist.md) — reasoning-level calibration for Codex agent runs
- [`../../agents/copilot-model-strategist.md`](../../agents/copilot-model-strategist.md) — Copilot coding-agent surface and plan gates
- [`../context-window-planning/SKILL.md`](../context-window-planning/SKILL.md) — context demand estimation for long runs
- [`../../knowledge/ai-coding-decision-trees.md`](../../knowledge/ai-coding-decision-trees.md) — vendor-neutral tier selection

Attribution

mcorbett51090mcorbett51090
View sourceSee grades on GitHubMore from mcorbett51090 →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698461 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →