Skills task-execution-engine
📦

task-execution-engine

Content revision r1 Medium Risk ⚙️ External commands

Run Markdown Implementation Tasks

Implementation plans often stall when tasks are tracked outside the design document. This skill reads Markdown checklists, selects the next task, and updates progress in place.

Supports: Claude Codex Code(CC)
📊 72 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "task-execution-engine" from https://skillstore.io/skills/notedit-task-execution-engine.md and its manifest at https://skillstore.io/api/skills/notedit-task-execution-engine/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/notedit-task-execution-engine.md Signed manifest GET /api/skills/notedit-task-execution-engine/manifest Signed lockfile GET /api/skills/notedit-task-execution-engine/lockfile

Test it

Using "task-execution-engine". Run the next task from docs/designs/user-auth.md.

Expected outcome:

  • Next task selected: Create User model.
  • Files to inspect: src/models/user.py and tests/models/test_user.py.
  • Progress is updated after verification.

Using "task-execution-engine". Resume implementation after an interrupted session.

Expected outcome:

  • Completed work is skipped.
  • Blocked tasks wait until dependencies are complete.
  • The first available pending task is started.

Using "task-execution-engine". Mark the current task as failed with a reason.

Expected outcome:

  • The task checkbox is marked as finished with a failure marker.
  • The reason is written under the task.
  • Remaining tasks can still continue when dependencies allow.

Security Audit

Medium Risk
v8 • 7/5/2026 Open versioned report

Most static findings are false positives caused by Markdown code fences, inline task attributes, and regex patterns. No shell or Ruby backtick execution was found. One medium issue remains because the helper reads and rewrites any supplied file path without validation.

4
Files scanned
772
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
scripts/task_manager.py:258scripts/task_manager.py:292-296scripts/task_manager.py:306-310
Unrestricted Task File Path
The helper accepts a file path from the command line and reads or rewrites that path without validation. A mistaken or malicious task file argument could modify files outside the intended design directory.
The code directly uses args.file for read_text and write_text in task commands. This is intended behavior, but no path allowlist or project-boundary check is present.

Risk Factors

⚙️ External commands (34)
references/task-format.md:8 references/task-format.md:17 references/task-format.md:74 references/task-format.md:83 references/task-format.md:92 references/task-format.md:101 references/workflow-guide.md:101 references/workflow-guide.md:106 references/workflow-guide.md:111 references/workflow-guide.md:120 references/workflow-guide.md:125 scripts/task_manager.py:34 scripts/task_manager.py:54 scripts/task_manager.py:59 scripts/task_manager.py:64 SKILL.md:12-24 SKILL.md:24-30 SKILL.md:30-33 SKILL.md:33 SKILL.md:39 SKILL.md:44 SKILL.md:48-54 SKILL.md:54-62 SKILL.md:62-74 SKILL.md:74-75 SKILL.md:75 SKILL.md:79-82 SKILL.md:82-83 SKILL.md:83 SKILL.md:87-93 SKILL.md:93-95 SKILL.md:95-101 SKILL.md:101-103 SKILL.md:103-113
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/notedit-task-execution-engine/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/notedit-task-execution-engine/security.svg)](https://skillstore.io/skills/notedit-task-execution-engine?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/notedit-task-execution-engine?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/notedit-task-execution-engine/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/notedit-task-execution-engine.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

notedit. (2026). task-execution-engine security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/notedit-task-execution-engine/audits/8

BibTeX citation

@techreport{notedit-notedit-task-execution-engine-2026, author = {notedit}, title = {task-execution-engine security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/notedit-task-execution-engine/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "task-execution-engine security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "notedit" date-released: "2026-07-05" url: "https://skillstore.io/skills/notedit-task-execution-engine/audits/8" identifiers: - type: other value: "skillstore:notedit-task-execution-engine:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
64
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Resume a Feature Build

Continue from the first unfinished task in a design document after an interrupted coding session.

Coordinate Batch Implementation

Run a prioritized task list while tracking completed, blocked, and failed work in one Markdown file.

Track Design-Driven Work

Keep implementation status beside requirements, target files, and acceptance criteria.

Try These Prompts

Start the Next Task 
Use task-execution-engine with docs/designs/user-auth.md. Show the next available task before editing files.
Resume Interrupted Work 
Resume implementation from docs/designs/user-auth.md. Continue from the first pending task and update checkbox status after each result.
Run With Verification 
Run tasks from docs/designs/billing.md in dependency order. After each task, run relevant tests and mark failures with a short reason.
Audit Then Continue 
Review docs/designs/search.md, summarize completed, pending, blocked, and failed work, then implement the highest-priority unblocked task.

Best Practices

  • Review the design document before starting unattended execution.
  • Keep task titles stable because dependencies reference task titles.
  • Create a checkpoint before running commands that update task files.

Avoid

  • Do not use vague tasks without files or acceptance criteria.
  • Do not run it against arbitrary files outside the project plan.
  • Do not mark a task complete before verification.

Frequently Asked Questions

What file format does this skill expect?
It expects a Markdown document with an Implementation Tasks section and checkbox task items.
How does it choose the next task?
It selects pending tasks whose dependencies are complete, then chooses the lowest priority number.
Can it resume interrupted work?
Yes. It reads the existing checkboxes and continues from the first available pending task.
Does it run tests automatically?
The workflow asks the agent to verify acceptance criteria. Test commands depend on the project.
Can it edit project files?
The skill can guide implementation work. Its helper script directly updates the selected Markdown task file.
Is it safe for untrusted task files?
No. Review task files first because they can direct broad implementation changes.

Developer Details

Author

notedit

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/notedit/happy-coding-agent/tree/main/skills/task-execution-engine

Ref

62e2a730c5cd74eab4c7164309d810de660fcea3

Maintenance freshness

7/20/2026

Usage

12 downloads · 189 views

File structure

📁 references/

📄 task-format.md

📄 workflow-guide.md

📁 scripts/

📄 task_manager.py

📄 SKILL.md