Install
$ agentstack add skill-choral-io-choral-skills-task-metadata-audit ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Task Metadata Audit
Runtime Context
Before acting, resolve ` using the runtime bootstrap rules, then read /.workflow/runtime.md and /.workflow/manifest.yml`; do not assume non-default workflow paths or default ids.
Use this skill to inspect task metadata and report issues. This skill is read-only.
Workflow
- Read
/.workflow/schemas/common.md. - Read
/.workflow/schemas/tasks.md. - Read
/.workflow/rules/delivery.md. - Read
/planning/KANBAN.md. - Scan
/tasks/*.md, excluding localized files. - Parse frontmatter and task body sections.
- Check task relationships against existing task ids and Kanban card ids.
- Report issues and dry-run fixes without editing files.
Checks
- Missing or invalid
type,priority,value,effort,readiness, ormodule. - Missing or invalid
severityonly whentypeisissue,bug, ordefectand impact is needed for triage. - Missing, empty, or unresolved
ownersin task items that arereadiness: ready, linked from a Kanban card, scheduled, assigned, or actively maintained. owners,assignees, orreviewersvalues that reference member or group documents without wikilinks, or tool-written values that should be path-qualified.- Group values in
assignees; report these as team-pool assignments, not direct assignment to the current member. - Missing
assigneesonly when the task appears scheduled or actively assigned. - Missing
reviewersonly when review responsibility is expected. blocked_byorrelated_toentries that point to missing or ambiguous task references.- Missing
## Sourcessection or sources that point only to local workspace notes or localized files. - Tasks with
readiness: readybut missing acceptance criteria. - Issue, bug, or defect tasks with
readiness: readybut missingProblem,Impact, orTriagecontext. - Reproducible bug or defect tasks with
readiness: readybut missingReproduction,Expected, orActual. - Tasks with
readiness: readywhose task item or required source materials are uncommitted. - Tasks with
readiness: readywhose task item or required source materials are not pushed to the default remote when one exists. - Tasks in
Readywith unresolvedblocked_byentries. - Tasks in
Readywithreadinessother thanready. - Tasks in
Blockedwithoutreadiness: blocked, unresolvedblocked_by, or an explicit blocker note. - Tasks in
Backlogwithreadiness: blocked; report as allowed planned dependency state, not an error. - Tasks outside
BacklogorBlockedwith unresolvedblocked_byentries. - Downstream tasks whose
blocked_byreferences are all resolved but still havereadiness: blockedor remain inBlocked. - Tasks in
Backlogthat appear ready but have not been promoted toReady. - Localized task files used as planning inputs.
Output
Use the standard task audit output shape from references/report.md: Summary, Findings, Dry-run fixes, Requires judgment, Safe for next-task-selection, and Sources.
Guardrails
- Do not edit task items.
- Do not move Kanban cards.
- Do not infer sensitive information.
- Do not treat
assigneesas Kanban status. - Treat source stability as a readiness audit and Ready-column maintenance check. Do not require
next-task-selectionto run the full audit for every candidate unless the user asks for strict verification or automatic start. - Require maintainer approval before any suggested fix is applied by another skill.
References
- For audit output examples, read
references/report.md.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: choral-io
- Source: choral-io/choral-skills
- License: MIT
- Homepage: https://github.com/choral-io/choral-skills
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.