Install
$ agentstack add skill-theafh-ai-modules-task-implement ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
task_implement
task_implement takes one task file from the project's tasks/ backlog and carries it all the way to done: it reads the task, loads the repo's guardrails, builds on the existing codebase, writes the code and the tests, runs the full suite clean, and confirms every ## Acceptance item holds. It is the "do this task now, properly" counterpart to task_create (which only writes the file) — turning the single-shot-implementable task body the base skill produces into actual shipped work. It does the work; it leaves verification to task_audit and close-out to task_finish.
Activate when the user points at one task in tasks/ and wants it built now:
- "Implement this task" / "implement ``."
- "Do task X" / "build the thing described in ``" / "make task Y happen."
Route elsewhere when the user wants to create a task (task_create or the base task skill), assess a task's readiness before building (task_check), automatically repair readiness issues before building (task_auto_check), choose what to work on next (task_select), verify a believed-done task against the codebase (task_audit), or close and archive a task (task_finish).
The task skill's SKILL.md is the source of truth for the task-file shape; read it and use its ` step to locate tasks/ and its / ` sections to read the task you are implementing. Implement the work the task describes — do not restate task-skill rules here.
The bundled scripts (discover_tasks.sh, lint.py) ship in scripts/ next to the base task skill's SKILL.md, not next to this one. After reading that base SKILL.md (per `), resolve each script's absolute path by combining the directory you loaded it from with scripts/ and invoke that absolute path — never a bare scripts/..., which resolves against the current working directory (the target project) rather than the skill, and so finds the project's own scripts/` or nothing. If the first invocation reports a missing file, re-resolve the absolute path once before treating the script as failed.
Run in order. Make no code edit before the first three steps are complete.
- Read the task end-to-end. Understand the desired behaviour, the
## Approach, the context pointers, and the scope / non-goals. The base skill writes each task to be self-sufficient — the file on its own is enough to implement, and you draw on everything actually available alongside it: the codebase, the project's standing instructions, the user. Treat the file as that contract, and restate your understanding before writing any code. - Load the guardrails. Read the governing
CLAUDE.mdfiles (repo root, this repo, and the one nearest the work) and hold their conventions as defaults for every edit — pseudo-XML and positive-language authoring, the Make + shell + markdown toolchain, snake_case naming, deployment-agnostic cross-references, and the versioning / plugin-lockstep rules — together with any constraint the task's own## Approachstates. - Understand the existing codebase, and confirm the work isn't already done. Read the code and tests already in place around the work, and extend the patterns, conventions, and architecture in use rather than inventing a new shape. Before writing anything, check the current state of the target: whether the artifact already exists, and whether the behaviour — or part of it — is already present. Build on or correct what is there instead of re-implementing it or clobbering it.
- Implement in order —
## Approachis the plan, the codebase is ground truth. Follow the## Approachstep by step, building everything in scope and skipping everything the task marks a non-goal, and name every artifact after the behaviour it delivers. Where a step's mechanics conflict with what the repo actually requires, do what the codebase requires and report the deviation rather than following the brief literally. When the task explicitly leaves a decision open, make the call and record the rationale in the shipped artifact — a code comment, theSKILL.mdbody, a doc — not only in chat. When the work lands, honor the base skill's `, stampstatus: implemented, writeimplemented-byresolved via, and bumpupdated`. - Build the tests. When
TESTING.mdexists at the project root, read it for project-specific testing details — stack, runner, layout, thresholds — before choosing the test shape. When it is absent, continue with the repo and task context already loaded. Map every## Acceptancecheck that implies a test to a real test, aligning its level, framework, and structure with the repo's testing conventions (for this repo, thetests//Pattern A layout). Tests are required deliverables — a missing test for a stated acceptance check is a gap, not a pass. - Cross-check, then run the verifications the acceptance names. Walk every
## Acceptanceitem and confirm the implementation covers it; resolve any gap before proceeding. Run every verification the task and repo name —make lint, the relevant bundledlint.py, the matchingtests//script_tests, and any acceptance-named check such as a deploy dry-run. Fix every failure your change introduces. Report a pre-existing failure that is unrelated to this task as such and keep it out of scope, and report the suite's actual state — naming any part still red rather than implying a clean run. - Update docs and versions. Update whatever documentation the task names, and apply the repo's one-bump-per-commit version and plugin-lockstep rules for any skill or plugin artifact touched.
task_implement does the work, stamps implemented in place, and stops at "work done, suite green." It does not verify by audit and does not archive — those are separate, single-purpose siblings:
- Codebase verification belongs to
task_audit(the read-only gate). - Close-out (
status→finishedordeferred, bumpupdated,git mvtoarchive/, re-point links) belongs totask_finish.
Stopping here keeps each sibling single-purpose and keeps the close-out — a checkpoint the user owns — out of an automated build step. On success, report the work as done and recommend the next links in the chain (task_audit to verify, then task_finish to close); leave running them to the user.
Report each ## Acceptance item as met or unmet with concrete evidence — the test that covers it, the command that passed. Make no "done" claim without a passing check, and surface anything unmet or skipped plainly. Close by pointing at task_audit as the next step.
The task_* family — each sibling does one job, then points to the next; the base task skill is the hub that can do all of it:
task_create— write one task filetask_check— readiness gate before building (read-only)task_auto_check— autonomously repair one task untiltask_checkreports readytask_explain— explain one task at a high level (read-only)task_select— choose and rank the next eligible task/action (read-only)task_implement— do the work (this skill)task_audit— verify a believed-done task against the codebase (read-only)task_finish— close out: set status, bumpupdated, archivetask_fix— audit and repair the whole tasks tree
These ship together as a family; any sibling may be absent if a deployment excluded it. The default manual chain is create → check → select → implement → audit → finish, with task_auto_check as an opt-in readiness repair loop and fix maintaining the tree.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: theafh
- Source: theafh/ai-modules
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.