to-tasks
Decompose settled changesets into a verifiable DAG and persist tasks to the configured tracker via split-tasks and track-tasks.
How do I install this agent skill?
npx skills add https://github.com/venhdev/zenforge --skill to-tasksIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill serves as a workflow orchestrator for task management, handling the decomposition and persistence of project changesets. While the skill includes a human-in-the-loop authorization requirement before data is persisted, it lacks formal input sanitization or boundary markers for the data it processes, which presents a surface for potential indirect prompt injection.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
What does this agent skill do?
to-tasks — Task Decomposition & Persistence Pipeline
Pipeline wrapper chaining task decomposition (via /split-tasks) and tracker persistence (via /track-tasks).
Operating Invariants
- Delegation Exclusivity: Delegate DAG derivation exclusively to
/split-tasksand persistence operations exclusively to/track-tasks; never calculate DAG topology or mutate files directly. - Lean Authorization Gate: Present the derived Task DAG and halt for authorization before persistence, unless task publication is already explicitly pre-authorized by the caller.
- Zero-Implementation Boundary: Task creation never authorizes code implementation; implementation remains a separate
/forgeinvocation.
Execution Protocol
- Decompose: Invoke
/split-taskswith the input changeset, architectural directions, or acceptance criteria to derive the in-memory Task DAG. - Authorize:
- If task persistence is unauthorized: Output the Task DAG from
/split-tasksasSTAGEDand halt the turn. - If persistence is authorized: Forward the Task DAG manifest directly to
/track-tasks.
- If task persistence is unauthorized: Output the Task DAG from
- Persist & Verify: Execute
/track-tasksto sync records to the configured tracker (.agents/task-tracker.md), verify IDs/paths, and report the persistence contract.
Routing
- Immediate in-turn execution of the first ready slice without tracker persistence → (via /split-tasks) → (via /forge).
- Syncing or state updates on pre-existing tasks → (via /track-tasks).
- Unresolved scope or conflicting dependencies discovered during slicing → (via /clarify).
- Ready, authorized task ready for implementation → (via /forge).
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/venhdev/zenforge/to-tasks">View to-tasks on skillZs</a>