Compétences groove-utilities-task-list

📦

groove-utilities-task-list

Name: groove-utilities-task-list
Author: andreadellacorte

Révision du contenu r1 Risque élevé ⚙️ Commandes externes📁 Accès au système de fichiers

Review Active Tasks Across Your Configured Backend

Active work is difficult to scan when task states and priorities are spread across a backend. This skill presents a concise, status-grouped task list.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "groove-utilities-task-list" from https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list.md and its manifest at https://skillstore.io/api/skills/andreadellacorte-groove-utilities-task-list/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/andreadellacorte-groove-utilities-task-list.md manifest signé GET /api/skills/andreadellacorte-groove-utilities-task-list/manifest lockfile signé GET /api/skills/andreadellacorte-groove-utilities-task-list/lockfile

Tester

Utilisation de « groove-utilities-task-list ». List my active tasks.

Résultat attendu:

In progress: Fix checkout timeout, high priority.
Ready: Add invoice export, normal priority.
Blocked: Update deployment workflow, waiting on repository access.

Utilisation de « groove-utilities-task-list ». Show blocked work first and explain dependencies.

Résultat attendu:

Blocked: Release mobile build. Waiting on signing credentials. In progress: Resolve login redirect. Ready: Update support documentation.

Utilisation de « groove-utilities-task-list ». List tasks when the backend is disabled.

Résultat attendu:

Task listing is disabled because tasks.backend is set to none.

Audit de sécurité

Risque élevé

v1 • 24/08/2026 Ouvrir le rapport versionné

The static findings for temporary storage, standard device access, and Markdown backticks are safe or expected usage patterns. However, the script interpolates an unvalidated configured limit into a jq program, which can expose environment data through jq filter injection.

Fichiers analysés

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Élevé

scripts/list-tasks-by-priority.sh:9-18

Unvalidated Limit Enables jq Filter Injection

The LIMIT argument is concatenated into jq source. A crafted configured value can alter the filter and make jq return environment data instead of tasks.

The script directly inserts LIMIT into a quoted jq program without numeric validation. jq can access process environment values through its built-in environment object.

Facteurs de risque

⚙️ Commandes externes (7)

scripts/list-tasks-by-priority.sh:11 SKILL.md:25 SKILL.md:26 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31

📁 Accès au système de fichiers (2)

scripts/list-tasks-by-priority.sh:16 scripts/list-tasks-by-priority.sh:11

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/andreadellacorte-groove-utilities-task-list/security.svg)](https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/andreadellacorte-groove-utilities-task-list/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/andreadellacorte-groove-utilities-task-list.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

andreadellacorte. (2026). groove-utilities-task-list security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1

Citation BibTeX

@techreport{andreadellacorte-andreadellacorte-groove-utilities-task-list-2026,
  author = {andreadellacorte},
  title = {groove-utilities-task-list security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "groove-utilities-task-list security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "andreadellacorte"
date-released: "2026-08-24"
url: "https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1"
identifiers:
  - type: other
    value: "skillstore:andreadellacorte-groove-utilities-task-list:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Start a Developer Workday

Review assigned active tasks before selecting the next implementation item.

Check Team Delivery Status

Scan in-progress and blocked work from the configured issue backend.

Prepare a Daily Update

Create a concise view of current work and blocking dependencies.

Essayez ces prompts

List My Tasks

List my active tasks from the configured backend.

Show Work by Status

Show my active tasks grouped by in-progress, ready, and blocked status. Put in-progress tasks first.

Focus on Blockers

List active tasks and clearly state what each blocked task is waiting on. Keep the result concise.

Create a Prioritized Work View

Fetch up to 20 active tasks from the configured backend. Group by status, preserve priority order, and highlight blocking dependencies.

Bonnes pratiques

Configure one supported backend in .groove/index.md before requesting a task list.
Use a reasonable list limit so the result remains easy to scan.
Install and authenticate the required backend CLI or MCP before running the skill.

Éviter

Do not expect the skill to modify task status, priority, or ownership.
Do not provide nonnumeric values for the configured task list limit.
Do not request unsupported task systems without adding a backend mapping.

Foire aux questions

Which task backends are supported?

The skill supports Beans, Linear, GitHub, and a none setting that disables task listing.

Does the skill change tasks?

No. It only reads and formats active tasks.

How are tasks organized?

Tasks are grouped by in-progress, ready or todo, and blocked status. In-progress tasks appear first.

What does the Beans backend require?

It requires the beans CLI and jq, and the script must run from the repository root.

What happens when a backend tool is unavailable?

The skill reports a clear error and points to the installation helper.

Can I control the number of returned tasks?

Yes. Set tasks.list_limit in .groove/index.md. The default limit is 15.

Détails du développeur

Auteur

andreadellacorte

Licence

MIT

Révision Skillstore

Avis de version

L’auteur n’a déclaré aucune version.

Dépôt

https://github.com/andreadellacorte/groove/tree/2494f0dabc68403b67cb6ca8575291d4c8c81a42/skills/groove-utilities-task-list

Réf

57a776331c532b66d98cc3916acaf5dd1275d9ca

Récence de maintenance

26/08/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📁 scripts/

📄 list-tasks-by-priority.sh

📄 SKILL.md