Install
$ agentstack add skill-yarlson-yarstack-yarstack-create-todo ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Create Todo
Create one durable Markdown todo from the user's request and current conversation context.
Rules
- Do not read local project files unless the user explicitly references them.
- The todo must have a concrete action and clear acceptance criteria. If either is missing or vague, ask targeted clarification questions using the available question/user-input tool. If no such tool is available, ask directly. Ask as many times as needed before creating the todo.
- Synthesize a concise human title from the request and context. Do not use the user's raw wording if a clearer title is available.
- Write minimal Markdown:
# Title, then a concise freeform body. - If the bundled script returns a source repo URL, include it as the first body line:
Source: https://github.com/owner/repo. - Keep the body freeform, but make the action and acceptance criteria explicit.
Workflow
- Confirm the action and acceptance criteria are clear.
- Generate the todo title and body.
- Capture the user's current working directory, then run the bundled script from this skill directory with that source directory:
``bash source_dir="$PWD" skill_dir="" "$skill_dir/create-todo.sh" --cwd "$source_dir" "" ``
The script prints two lines:
- line 1: absolute path to the empty todo file
- line 2: optional GitHub source repo URL; empty when unavailable
- Write the Markdown content to the returned file path.
- Format the todo:
``bash bunx prettier --write "$todo_file" ``
If bunx is unavailable, use:
``bash npx prettier --write "$todo_file" ``
If formatting fails, stop before committing.
- Commit only the new todo file in
~/.create-todo:
``bash todo_root="$HOME/.create-todo" todo_rel="${todo_file#"$todo_root"/}" git -C "$todo_root" add -- "$todo_rel" git -C "$todo_root" commit -m "todo: " -- "$todo_rel" ``
Do not stage or commit any other files. If the commit fails, surface git's error.
- If
~/.create-todohas anoriginremote, pushmain:
``bash git -C "$HOME/.create-todo" push origin main ``
If no origin exists, report that the todo was committed locally and push was skipped. If push fails, report that the todo was created and committed, then surface the push error.
Script Contract
create-todo.sh owns deterministic file creation and first-run todo-store setup:
- creates
~/.create-todo - initializes git on
mainwhen needed - creates and commits minimal
README.mdand.gitignoreasinitialize todo storewhen the todo store has no commits - detects the source project from
--cwdgitorigin, git root, or folder name - creates
~/.create-todo//---.md - returns the todo file path and optional GitHub source repo URL
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: yarlson
- Source: yarlson/yarstack
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.