Skills groove-utilities-task-list
📦

groove-utilities-task-list

Content revision r1 High Risk ⚙️ External commands📁 Filesystem access

Review Active Tasks Across Your Configured Backend

Active work is difficult to scan when task states and priorities are spread across a backend. This skill presents a concise, status-grouped task list.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "groove-utilities-task-list" from https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list.md and its manifest at https://skillstore.io/api/skills/andreadellacorte-groove-utilities-task-list/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/andreadellacorte-groove-utilities-task-list.md Signed manifest GET /api/skills/andreadellacorte-groove-utilities-task-list/manifest Signed lockfile GET /api/skills/andreadellacorte-groove-utilities-task-list/lockfile

Test it

Using "groove-utilities-task-list". List my active tasks.

Expected outcome:

  • In progress: Fix checkout timeout, high priority.
  • Ready: Add invoice export, normal priority.
  • Blocked: Update deployment workflow, waiting on repository access.

Using "groove-utilities-task-list". Show blocked work first and explain dependencies.

Expected outcome:

Blocked: Release mobile build. Waiting on signing credentials. In progress: Resolve login redirect. Ready: Update support documentation.

Using "groove-utilities-task-list". List tasks when the backend is disabled.

Expected outcome:

Task listing is disabled because tasks.backend is set to none.

Security Audit

High Risk
v1 • 8/24/2026 Open versioned report

The static findings for temporary storage, standard device access, and Markdown backticks are safe or expected usage patterns. However, the script interpolates an unvalidated configured limit into a jq program, which can expose environment data through jq filter injection.

2
Files scanned
52
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
scripts/list-tasks-by-priority.sh:9-18
Unvalidated Limit Enables jq Filter Injection
The LIMIT argument is concatenated into jq source. A crafted configured value can alter the filter and make jq return environment data instead of tasks.
The script directly inserts LIMIT into a quoted jq program without numeric validation. jq can access process environment values through its built-in environment object.

Risk Factors

⚙️ External commands (7)
scripts/list-tasks-by-priority.sh:11 SKILL.md:25 SKILL.md:26 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31
📁 Filesystem access (2)
scripts/list-tasks-by-priority.sh:16 scripts/list-tasks-by-priority.sh:11
Audited by: codex
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/andreadellacorte-groove-utilities-task-list/security.svg)](https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/andreadellacorte-groove-utilities-task-list/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/andreadellacorte-groove-utilities-task-list.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

andreadellacorte. (2026). groove-utilities-task-list security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1

BibTeX citation

@techreport{andreadellacorte-andreadellacorte-groove-utilities-task-list-2026, author = {andreadellacorte}, title = {groove-utilities-task-list security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "groove-utilities-task-list security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "andreadellacorte" date-released: "2026-08-24" url: "https://skillstore.io/skills/andreadellacorte-groove-utilities-task-list/audits/1" identifiers: - type: other value: "skillstore:andreadellacorte-groove-utilities-task-list:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
85
Content
65
Community
83
Spec Compliance

What You Can Build

Start a Developer Workday

Review assigned active tasks before selecting the next implementation item.

Check Team Delivery Status

Scan in-progress and blocked work from the configured issue backend.

Prepare a Daily Update

Create a concise view of current work and blocking dependencies.

Try These Prompts

List My Tasks 
List my active tasks from the configured backend.
Show Work by Status 
Show my active tasks grouped by in-progress, ready, and blocked status. Put in-progress tasks first.
Focus on Blockers 
List active tasks and clearly state what each blocked task is waiting on. Keep the result concise.
Create a Prioritized Work View 
Fetch up to 20 active tasks from the configured backend. Group by status, preserve priority order, and highlight blocking dependencies.

Best Practices

  • Configure one supported backend in .groove/index.md before requesting a task list.
  • Use a reasonable list limit so the result remains easy to scan.
  • Install and authenticate the required backend CLI or MCP before running the skill.

Avoid

  • Do not expect the skill to modify task status, priority, or ownership.
  • Do not provide nonnumeric values for the configured task list limit.
  • Do not request unsupported task systems without adding a backend mapping.

Frequently Asked Questions

Which task backends are supported?
The skill supports Beans, Linear, GitHub, and a none setting that disables task listing.
Does the skill change tasks?
No. It only reads and formats active tasks.
How are tasks organized?
Tasks are grouped by in-progress, ready or todo, and blocked status. In-progress tasks appear first.
What does the Beans backend require?
It requires the beans CLI and jq, and the script must run from the repository root.
What happens when a backend tool is unavailable?
The skill reports a clear error and points to the installation helper.
Can I control the number of returned tasks?
Yes. Set tasks.list_limit in .groove/index.md. The default limit is 15.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/andreadellacorte/groove/tree/2494f0dabc68403b67cb6ca8575291d4c8c81a42/skills/groove-utilities-task-list

Ref

57a776331c532b66d98cc3916acaf5dd1275d9ca

Maintenance freshness

8/25/2026

Usage

0 downloads · 0 views

File structure

📁 scripts/

📄 list-tasks-by-priority.sh

📄 SKILL.md