Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Manage Work

ASecurity

Automatically route ordinary requests to inspect, plan, critique, adjudicate, explicitly execute, or safely control Forge work through ledger-native ore work items and typed Forged operations. Use whenever the operator discusses work without naming a Forged skill.

2 stars
0 votes
0 copies
1 views
Added 9/3/2026
developmentbashsecurity

Security Analysis

A100/100

Scanned 9/20/2026

Install to Claude Code

$npx -y skills add tcashel/forge --skill manage-work --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Manage Work?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Manage Work
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tcashel-manage-work/badge)](https://www.skillsdirectory.com/skills/tcashel-manage-work)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: manage-work
description: "Automatically route ordinary requests to inspect, plan, critique, adjudicate, explicitly execute, or safely control Forge work through ledger-native ore work items and typed Forged operations. Use whenever the operator discusses work without naming a Forged skill."
---

# Manage work conversationally

Position: `forged explain --id "$SUBJECT_ID"` states one exact subject's lifecycle and health.
Next: `forged next --repo "$TARGET_REPO"` states the bounded repository action.

Boundary: the lead owns conversation, research, planning, critique,
adjudication, and operator judgment. Forged owns attempts, controllers, gates,
and evidence after explicit dispatch. Apps are optional views, never authority.

Preserve a supplied technical specification and research only its gaps. For a
desired outcome, resolve routine engineering choices and prepare the smallest
executable contract. The lead handles the ledger and lifecycle; the operator
need not translate the request into Forge terminology.

## Route one fixture case

`intent-fixtures.json` and `portfolio-control-fixtures.json` are the routing
contract. Match exactly one case, preserve its confirmation class and effect
budget, and fail closed when identity or scope is ambiguous. Each case has one
route line below.

### Intent routes

- `observe` → `observe`
- `explore` → `explore`
- `plan` → `plan`
- `revise` → `revise`
- `critique` → `critique`
- `adjudicate` → `adjudicate`
- `configure` → `configure`
- `plan-approval` → `plan-approval`
- `execute-slice` → `execute-slice`
- `execute-epic` → `execute-epic`
- `ambiguous-approval` → `ambiguous-approval`
- `stale-approval` → `stale-approval`
- `status` → `status`
- `control` → `control`
- `external-context` → `external-context`

Delegate `plan` and `revise` to `../plan/SKILL.md`, `configure` to
`../configure/SKILL.md`, `critique` to `../critique/SKILL.md`, `adjudicate` to
`../adjudicate/SKILL.md`, `execute-slice` to `../dispatch/SKILL.md`, and
`execute-epic` to `../run-epic/SKILL.md`. Exploration persists nothing. Plan
wording approval never implies execution. Mixed requests complete prerequisites
and continue through every explicitly authorized intent without another prompt
for the same authority.

### Portfolio and control routes

- `status-unscoped` → `operations-overview`
- `status-repository` → `operations-overview`
- `needs-me` → `operations-overview`
- `app-unavailable` → `operations-overview`
- `detail-exact` → `work-detail`
- `title-unique` → `operations-then-detail`
- `title-zero` → `refuse`
- `title-ambiguous` → `refuse`
- `blocker-explanation` → `work-detail`
- `spend-known` → `work-detail`
- `spend-unknown` → `work-detail`
- `plan-only-detail` → `refuse`
- `priority-change` → `work-notes-priority-intent`
- `epic-pause` → `epic-pause`
- `epic-resume` → `epic-resume`
- `input-required-resume` → `work-detail`
- `slice-cancel` → `run-stop-cancelled`
- `slice-pause-unsupported` → `refuse`
- `epic-stop-unsupported` → `refuse`
- `stale-precondition` → `refuse`
- `duplicate-response` → `refuse`
- `attention-acknowledge-lead` → `attention-acknowledge`
- `attention-resolve-lead` → `attention-resolve`
- `attention-resolve-human` → `attention-resolve`
- `attention-source-backed` → `refuse`
- `attention-stale-occurrence` → `refuse`
- `attention-reopen` → `attention-reopen`
- `review-risk-acceptance` → `run-accept-risk`
- `merge-approval` → `refuse`
- `session-diagnostic` → `session-diagnostic`
- `session-stop-substitution` → `refuse`
- `adjudicate-unfenceable` → `run-adjudicate-settlement`
- `adjudicate-fenceable-refused` → `refuse`

Use the fixture's postcondition as the readback assertion. Missing cost stays
unknown, priority intent does not change scheduling, acknowledgement is custody
only, and input resolution follows its domain operation. Never substitute a
session or process action for lifecycle control. Default-branch merge is human
owned.

## Orient, decide, act, wait

Resolve repository language before unscoped portfolio language. The canonical
absolute checkout becomes `metadata.repository`; unavailable repository truth
fails closed rather than widening scope.

```bash
forged next --repo "$TARGET_REPO"
forged explain --id "$SUBJECT_ID"
```

`next` is bounded and returns no specification bodies unless requested.
`explain` carries subject, lifecycle, health, evidence, and at most one `should`
action with pre-bound args. Titles are selectors only after one bounded result
contains exactly one canonical match. Zero matches refuse; multiple matches ask
one concise disambiguation question.

Invoke the fixture route once with the exact id, occurrence, revision, and
parameters from the fresh projection. A direct unambiguous imperative
authorizes one non-destructive existing-work control. Cancellation, accepted
risk, human-owned resolution, settlement adjudication, and any destructive
route require a fresh tuple naming the durable effect. Re-read the exact id;
stale inputs, unsupported state, ambiguous results, or failed postconditions
become visible input-required evidence and are never retried automatically.

## Execution boundary

Validate the intended profile and roster, then verify id, title, revision,
repository, base, actor, and effect against the operator's explicit execution
authority. Use authority already granted for the outcome without another
approval prompt. Ask when authority is missing or the action exceeds its
scope, cost, or risk limits. Approval of a specific tuple does not cover a
changed tuple; approval of planning or adjudication does not dispatch.

```bash
forged definition validate --profile "$PROFILE" --roster "$ROSTER"
forged run dispatch --id "$WORK_ID" --approved-by "$APPROVED_BY" \
  --basis "$BASIS" --repo "$TARGET_REPO" --base-ref "$BASE_REF" \
  --profile "$PROFILE" --roster "$ROSTER"
forged wait --id "$RUN_ID" --until decision --timeout 240
```

The fenced `run dispatch` operation records approval and immutable handoff
together. Epic execution uses `../run-epic/SKILL.md`. After approval of an exact
dispatch tuple, keep its repository and work-item inputs unchanged until
handoff. Return durable ids promptly. If the operator asked you to drive
through completion, continue from `wait`; detached submission alone ends at
handoff. Waiting is one `wait` call, never a polling loop.

Check unattended capability without changing it:

```bash
forged doctor
forged service status
```

Do not install, start, restart, or repair the service here.

## Judgment and refusals

Use standard assurance on routine isolated work and escalate only the seats
needed by security, destructive-data, concurrency, or compatibility risk. The
profile's budget ends review; do not seek unanimity. The lead makes routine
engineering calls and asks only about product scope, external authority, or
risk acceptance.

Every refusal must preserve `forged.remedy/1` and name the exact recovery verb.
Run that remedy after its preconditions hold; do not invent choreography,
access a legacy store, synchronize an external tracker, or edit `state.db`.

Attribution

tcasheltcashel
View sourceMore from tcashel →
SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Know which skills are safe — weekly.

Best new skills + every skill we flagged as malicious. From the team that scanned 103,619.

Join free

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

281612 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2132 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →