Fähigkeiten groove-utilities-task-list

📦

groove-utilities-task-list

Name: groove-utilities-task-list
Author: andreadellacorte

Inhaltsrevision r1 Hohes Risiko ⚙️ Externe Befehle📁 Dateisystemzugriff

Review Active Tasks Across Your Configured Backend

Active work is difficult to scan when task states and priorities are spread across a backend. This skill presents a concise, status-grouped task list.

Unterstützt: Claude Codex Code(CC)

⚠️ 38 Schlecht

Vor der Installation anhalten und eine Bestätigung anfordern.

Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "groove-utilities-task-list" from https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list.md and its manifest at https://skillstore.io/api/skills/andreadellacorte-groove-utilities-task-list/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/andreadellacorte-groove-utilities-task-list.md Signiertes manifest GET /api/skills/andreadellacorte-groove-utilities-task-list/manifest Signiertes lockfile GET /api/skills/andreadellacorte-groove-utilities-task-list/lockfile

Testen

„groove-utilities-task-list“ wird verwendet. List my active tasks.

Erwartetes Ergebnis:

In progress: Fix checkout timeout, high priority.
Ready: Add invoice export, normal priority.
Blocked: Update deployment workflow, waiting on repository access.

„groove-utilities-task-list“ wird verwendet. Show blocked work first and explain dependencies.

Erwartetes Ergebnis:

Blocked: Release mobile build. Waiting on signing credentials. In progress: Resolve login redirect. Ready: Update support documentation.

„groove-utilities-task-list“ wird verwendet. List tasks when the backend is disabled.

Erwartetes Ergebnis:

Task listing is disabled because tasks.backend is set to none.

Sicherheitsaudit

Hohes Risiko

v1 • 24.8.2026 Versionsbericht öffnen

The static findings for temporary storage, standard device access, and Markdown backticks are safe or expected usage patterns. However, the script interpolates an unvalidated configured limit into a jq program, which can expose environment data through jq filter injection.

Gescannte Dateien

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Hoch

scripts/list-tasks-by-priority.sh:9-18

Unvalidated Limit Enables jq Filter Injection

The LIMIT argument is concatenated into jq source. A crafted configured value can alter the filter and make jq return environment data instead of tasks.

The script directly inserts LIMIT into a quoted jq program without numeric validation. jq can access process environment values through its built-in environment object.

Risikofaktoren

⚙️ Externe Befehle (7)

scripts/list-tasks-by-priority.sh:11 SKILL.md:25 SKILL.md:26 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31

📁 Dateisystemzugriff (2)

scripts/list-tasks-by-priority.sh:16 scripts/list-tasks-by-priority.sh:11

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/andreadellacorte-groove-utilities-task-list/security.svg)](https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/andreadellacorte-groove-utilities-task-list/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/andreadellacorte-groove-utilities-task-list.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

andreadellacorte. (2026). groove-utilities-task-list security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1

BibTeX-Zitat

@techreport{andreadellacorte-andreadellacorte-groove-utilities-task-list-2026,
  author = {andreadellacorte},
  title = {groove-utilities-task-list security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "groove-utilities-task-list security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "andreadellacorte"
date-released: "2026-08-24"
url: "https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1"
identifiers:
  - type: other
    value: "skillstore:andreadellacorte-groove-utilities-task-list:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Start a Developer Workday

Review assigned active tasks before selecting the next implementation item.

Check Team Delivery Status

Scan in-progress and blocked work from the configured issue backend.

Prepare a Daily Update

Create a concise view of current work and blocking dependencies.

Diese Prompts ausprobieren

List My Tasks

List my active tasks from the configured backend.

Show Work by Status

Show my active tasks grouped by in-progress, ready, and blocked status. Put in-progress tasks first.

Focus on Blockers

List active tasks and clearly state what each blocked task is waiting on. Keep the result concise.

Create a Prioritized Work View

Fetch up to 20 active tasks from the configured backend. Group by status, preserve priority order, and highlight blocking dependencies.

Bewährte Praktiken

Configure one supported backend in .groove/index.md before requesting a task list.
Use a reasonable list limit so the result remains easy to scan.
Install and authenticate the required backend CLI or MCP before running the skill.

Vermeiden

Do not expect the skill to modify task status, priority, or ownership.
Do not provide nonnumeric values for the configured task list limit.
Do not request unsupported task systems without adding a backend mapping.

Häufig gestellte Fragen

Which task backends are supported?

The skill supports Beans, Linear, GitHub, and a none setting that disables task listing.

Does the skill change tasks?

No. It only reads and formats active tasks.

How are tasks organized?

Tasks are grouped by in-progress, ready or todo, and blocked status. In-progress tasks appear first.

What does the Beans backend require?

It requires the beans CLI and jq, and the script must run from the repository root.

What happens when a backend tool is unavailable?

The skill reports a clear error and points to the installation helper.

Can I control the number of returned tasks?

Yes. Set tasks.list_limit in .groove/index.md. The default limit is 15.

Entwicklerdetails

Autor

andreadellacorte

Lizenz

MIT

Skillstore-Revision

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/andreadellacorte/groove/tree/2494f0dabc68403b67cb6ca8575291d4c8c81a42/skills/groove-utilities-task-list

Ref.

57a776331c532b66d98cc3916acaf5dd1275d9ca

Aktualität der Wartung

25.8.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📁 scripts/

📄 list-tasks-by-priority.sh

📄 SKILL.md