nsheaps/todo-plus-plus
plugins/todo-plus-plus/skills/todo-plus-plus/SKILL.md
Task workflow enforcement plugin. Use when asking about commit-on-complete behavior, task completion requirements, ephemeral session awareness, or why a task completion was blocked.
$ install --global
skillsauthnpx skillsauth add nsheaps/ai-mktpl todo-plus-plusInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 4:18 PM52.9s1 file scanned
SKILL.md
- name:
- todo-plus-plus
- description:
- Task workflow enforcement plugin. Use when asking about commit-on-complete behavior, task completion requirements, ephemeral session awareness, or why a task completion was blocked.
Todo++ Plugin
This plugin enforces two workflow rules for Claude Code sessions:
1. Commit-on-Complete
A TaskCompleted hook checks for uncommitted changes when any task is marked complete. If there are uncommitted or unpushed changes, the completion is blocked until you commit and push.
Why
Agents frequently complete work but forget to commit. In ephemeral sessions (teammates, sub-agents), uncommitted work is lost when the session ends. This hook prevents that.
What Gets Checked
- Uncommitted changes: Any staged, unstaged, or untracked files (
git status --porcelain) - Unpushed commits: Local commits that haven't been pushed to the remote
If Blocked
When task completion is blocked:
- Run
git statusto see what needs attention - Stage and commit your changes
- Push to remote
- Then mark the task complete again
Exceptions
- If not in a git repository, the check is skipped
- The hook only fires on TaskCompleted events (team task system)
2. Ephemeral Session Awareness
A SessionStart hook injects a reminder that:
- Tasks (TaskCreate/TaskUpdate/TaskList) are for local session work only
- Tasks do NOT persist across sessions
- Persistent tracking belongs in external systems (GitHub Issues, Linear, etc.)
- Always commit and push before marking tasks complete
Why
Agents sometimes use the Task system as if it were a persistent project tracker, creating tasks they expect to survive session boundaries. This wastes context and creates confusion when tasks disappear.
Configuration
No configuration required. Install the plugin and it works automatically.
Disabling
To temporarily disable commit enforcement, you can:
- Disable the plugin in settings.json
- Or remove the plugin from enabledPlugins
Related Skills
nsheaps/claude-code
tools
VerifiedTrustedCommunity
Reference material for Claude Code internals — the on-disk layout under ~/.claude and project-scope .claude, the plugin cache, session-env propagation, and the full hook lifecycle. Auto-recall when working on Claude-Code-related tasks: writing or debugging hooks, authoring plugins, inspecting session state, troubleshooting why an env var is or isn't visible to a Bash tool call, or when paths under ~/.claude or ~/.claude/plugins/ come up.
3SKILL.mdUpdated May 6, 2026
nsheaps/github-app-token
development
VerifiedTrustedCommunity
Manage GitHub App installation tokens in Claude Code sessions. Use when tokens expire, auth errors occur in long-running sessions, or when setting up GitHub App credentials for agent teams. <example>my github token expired</example> <example>refresh the github app token</example> <example>check token status</example> <example>set up github app authentication for this session</example>
3SKILL.mdUpdated Apr 22, 2026
nsheaps/auto-config
tools
VerifiedTrustedCommunity
Auto-detect project formatting tools and configure edit-utils settings
3SKILL.mdUpdated Apr 22, 2026
nsheaps/op
tools
VerifiedTrustedCommunity
Use this skill when the user asks about 1Password, secrets management, retrieving credentials, using op CLI, service accounts, secret references, vault operations, or any task involving the 1Password CLI (op). Also use when needing to inject secrets into environment variables, read passwords or API keys from 1Password, or manage 1Password items from the command line.
3SKILL.mdUpdated Apr 22, 2026