Skip to content
Back to skills

Todo

ASecurity

Keep restart-grade records for cross-turn work, external waits, parked tasks, and handoffs. Also handles an explicit cross-supervisor protocol request.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 13, 2026
ai-agentsgit

Works with

  • terminal

Security analysis

A100/100

Pro scans all 11 files and shows the line behind each finding

Scanned October 13, 2026

npx -y skills add tompassarelli/north --skill todo --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Todo?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Todo
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tompassarelli-todo/badge)](https://www.skillsdirectory.com/skills/tompassarelli-todo)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: todo
description: >-
  Keep restart-grade records for cross-turn work, external waits, parked tasks, and handoffs. Also handles an explicit cross-supervisor protocol request.
grounded: 2026-10-06
written: 2026-10-06
metadata:
  kind: playbook
---

# Todo continuity

Use the flat `~/code/todo/` inventory only when work must survive the current
turn/process and Git plus conversation cannot safely recover its live state.
Ordinary plans, in-turn delegation, and recoverable worktrees need no record.

## Keep a resumable record

- One Markdown file with TOML front matter per independently resumable unit;
  no nested records or `main/`. `AGENTS.md` and `agent-coord.md` are singletons.
- Record the outcome, exact owner, current checkpoint, executable next actions,
  observed verification, and recovery/cleanup conditions. Include only needed
  dependencies, conversation IDs, coordination facts, and every live lane.
- Give independently required resumable execution one `[[attempt]]`.
  Forecast/staffing facts enter only when needed.
- Record a model only from concrete run/dispatch evidence. Unknown identity
  stays an evidence gap, never `self`, `parent`, `default`, or `auto`.
- Replace stale state at meaningful boundaries, including superseded holds.
  Distinguish operator restrictions from agent recommendations; notes do not
  grant or revoke authorization. Do not append a transcript.
- The product owner closes from terminal evidence; the run's host separately
  settles its process, delivery, driver, and child state.
- Delete only after owned changes, dependents, cleanup, continuity, and awaited
  acknowledgements are settled.

For exact fields, read `references/notes.md` and read its record
schema. Keep repository paths `repo:path` and runtime/worktree paths
`~`-anchored.

## Explicit cross-supervisor request

Read [nixos-config:cross-supervisor transport](references/cross-supervisor.md).
It specifies the paired monitors, duplex helper, event delivery, renewal, and
settlement. Never ask the operator to relay protocol tokens. `OPEN` and
`RECEIVED` convey no work ownership; transfers need separate acknowledgement.

Files in this skill

  • SKILL.md2.1 KB
  • references/attempts-and-observations.md3.9 KB
  • references/cross-supervisor.md4.5 KB
  • references/mailbox-contract.md6.7 KB
  • references/notes.md319 B
  • references/records-and-dependencies.md3.3 KB
  • scripts/build-cross-supervisor-mailbox1.6 KB
  • scripts/cross-supervisor-mailbox-host.mjs14.5 KB
  • scripts/cross-supervisor-mailbox.bjs8.4 KB
  • scripts/cross-supervisor-mailbox.mjs12.2 KB
  • scripts/cross-supervisor-mailbox.test.sh9.4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.