ln-300-task-coordinator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ln-300-task-coordinator (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Paths: File paths (references/,../ln-*) are relative to this skill directory.
Type: L2 Domain Coordinator Category: 3XX Planning
Runtime-backed task planning coordinator. The runtime owns readiness gating, pause/resume, and worker result tracking.
MANDATORY READ: Load references/coordinator_runtime_contract.md, references/task_planning_runtime_contract.md, references/coordinator_summary_contract.md, and references/task_plan_worker_runtime_contract.md MANDATORY READ: Load references/environment_state_contract.md, references/storage_mode_detection.md, references/problem_solving.md, and references/creation_quality_checklist.md MANDATORY READ: Load references/agent_delegation_pattern.md when Phase 3 external validation is triggered MANDATORY READ: Load references/researchgraph_mcp_usage.md when the Story references H/G/run IDs or implementation readiness depends on project hypotheses. Tool policy: follow host AGENTS.md MCP preferences; load references/mcp_tool_preferences.md and references/mcp_integration_patterns.md only when host policy is absent or MCP behavior is unclear.
CREATE, ADD, or REPLAN| Parameter | Required | Description |
|---|---|---|
storyId | Yes | Story to plan |
autoApprove | No | If false, runtime may pause for readiness approval |
Runtime family: task-planning-runtime
Identifier:
story-{storyId}Phases:
PHASE_0_CONFIGPHASE_1_DISCOVERYPHASE_2_DECOMPOSEPHASE_3_READINESS_GATEPHASE_4_MODE_DETECTIONPHASE_5_DELEGATEPHASE_6_VERIFYPHASE_7_SELF_CHECKTerminal phases:
DONEPAUSEDCoordinator stage artifact:
summary_kind=pipeline-stage after verificationln-1000 consumes this artifact as the Stage 0 completion signalResolve Story and collect only the inputs required for task planning:
Do NOT load existing tasks here. Existing tasks load in Phase 4 only.
index_project(path=project_root)analyze_architecture(path=project_root, verbosity="minimal")find_symbols + inspect_symbol for named components from Story AC or Technical Notes, but only after narrowing path where possible; if symbol discovery is truncated, refine to name + file or workspace_qualified_name before planning from itverify_index and then inspect only the referenced H##/G## IDs or proposed candidates.hex-research to confirm hypothesis implementation status, refinement gaps, and proposal readiness; keep hex-graph as the source for code symbol and module boundaries.Checkpoint payload:
discovery_readyBuild the ideal task plan from ACs only. Do not read or reference existing tasks.
Order of operations:
.hex-skills/task-planning/{identifier}_traceability.mdRules:
Checkpoint payload:
ideal_plan_summarytraceability_table_pathScore the plan before delegation.
#### Step 1: Self-score
Scoring policy:
6-7 -> continue4-5 -> PAUSED for approval or improvement<4 -> blocked until plan is correctedSelf-check: verify each layer (Foundation, Invocation, Knowledge, Wiring) has at least one task when the traceability table contains buildable artifacts in the corresponding segments.
#### Step 2: Conditional external traceability validation
Run this step only when at least one trigger is true:
4-5ADD vs REPLAN)If triggered:
node references/agents/agent_runner.mjs --health-check --jsona. Build validation prompt from references/agents/prompt_templates/traceability_validator.md b. Fill placeholders with Phase 1 discovery and Phase 2 output c. Save filled prompt to .hex-skills/task-planning/{identifier}_traceability_prompt.md d. Launch agent via agent_runner.mjs:
node references/agents/agent_runner.mjs \
--agent {advisor_agent} \
--prompt-file .hex-skills/task-planning/{identifier}_traceability_prompt.md \
--output-file .hex-skills/task-planning/{identifier}_traceability_result.json \
--cwd {project_dir}e. Parse result JSON for gaps f. For each MISSING gap: readiness_score -= 1 g. For each BUNDLED gap: readiness_score -= 0.5 h. If MISSING gaps found: re-enter Phase 2. Max 1 re-decomposition.
If not triggered:
traceability_validation = self_check_onlyCheckpoint payload:
readiness_scorereadiness_findingstraceability_validation — one of: agent_validated, self_check_only, redecomposedDetect:
CREATEADDREPLANPause when mode is ambiguous.
Checkpoint payload:
mode_detectionSingle mutation handoff. Delegate to exactly one worker:
ln-301-task-creatorln-302-task-replannerManaged delegation sequence:
childRunId = {parent_run_id}--{worker}--{storyId}.childSummaryArtifactPath = .hex-skills/runtime-artifacts/runs/{parent_run_id}/task-plan/{worker}--{storyId}.json..hex-skills/task-planning/{worker}--{storyId}_manifest.json.task-plan-worker-runtime with both --run-id and --summary-artifact-path.child_run metadata before invoking the worker.task-plan artifact and record it through runtime record-plan.Coordinator context to pass to workers:
idealPlan: the full ideal plan from Phase 2traceabilityTablePath: path to materialized traceability tablediscoveryContext: Phase 1 findingsVerify the worker result and the resulting task set only. Do not reopen decomposition unless verification proves the worker output is invalid.
Template compliance gate: Fetch each created Task via the configured tracker provider (getTask operation per references/tracker_provider_contract.md). Run validateTemplateCompliance(description, 'task') from planning-runtime/lib/template-compliance.mjs. All tasks must pass (7 sections in order). Record template_compliance_passed in state. Guard blocks SELF_CHECK without it.
Checkpoint payload:
verification_summaryfinal_resulttemplate_compliance_passedAfter verification succeeds, write a Stage 0 coordinator artifact with:
stage=0story_idstatus=completedfinal_resultstory_statusreadiness_scorewarningsConfirm:
Checkpoint payload:
passfinal_resultUse runtime PAUSED + pending_decision for:
ADD vs REPLAN4-5Workers:
runId and summaryArtifactPathtask-plan summary envelope and write the artifact before terminal outcomeExpected summary kind:
task-planHost Skill Invocation: Skill(skill: "...", args: "...") is mandatory delegation.
SKILL.md, treat args as $ARGUMENTS, execute that skill workflow, then return here with its result/artifact.| Phase | Worker | Context |
|---|---|---|
| 5 | ln-301-task-creator | CREATE or ADD path |
| 5 | ln-302-task-replanner | REPLAN path |
node references/scripts/task-plan-worker-runtime/cli.mjs start --skill {worker} --story {storyId} --manifest-file .hex-skills/task-planning/{worker}--{storyId}_manifest.json --run-id {childRunId} --summary-artifact-path {childSummaryArtifactPath}
node references/scripts/task-planning-runtime/cli.mjs checkpoint --story {storyId} --phase PHASE_5_DELEGATE --payload '{"child_run":{"worker":"{worker}","run_id":"{childRunId}","summary_artifact_path":"{childSummaryArtifactPath}"}}'
Skill(skill: "{worker}", args: "{storyId} --ideal-plan {idealPlanJSON} --traceability {tablePath} --discovery {discoveryJSON} --run-id {childRunId} --summary-artifact-path {childSummaryArtifactPath}")
Read {childSummaryArtifactPath}
node references/scripts/task-planning-runtime/cli.mjs record-plan --story {storyId} --payload '{...task-plan summary...}'- Phase 1: Discover Story context (pending)
- Phase 2: Build ideal task plan (pending)
- Phase 3: Run readiness gate (local score first, external validation only if triggered) (pending)
- Phase 4: Detect mode (pending)
- Phase 5: Start child runtime, checkpoint child metadata, and perform the single worker handoff (pending)
- Phase 6: Verify worker result (pending)
- Phase 7: Self-check (pending)runIdOptional reference: load references/meta_analysis_protocol.md only when the user asks for post-run meta-analysis or protocol-formatted run reflection.
Skill type: planning-coordinator. When requested, run after all phases complete. Output to chat using the protocol format.
Version: 4.0.0 Last Updated: 2026-02-03
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.