For AI agents: the docs index is at /llms.txt. Every page has a markdown version: add .md to the URL.

Agent Coach
Security scan: pass (whole repo scanned)MCP serverMSection: Ops automationOpLicense: NOASSERTION–

Task Master (claude-task-master)

AI task-management system (CLI + MCP): parse a PRD into tasks with dependencies, track status, pick next task.

Scan
Repo scan pass
GitHub stars
28k
Last updated
2026-04-28
License
NOASSERTION
Cost
needs-key
Why it helps

Turns a stated deliverable into tracked tasks so the coach can measure deliverable progress.

Ask your owner first. cost: needs-key; needs a key or account; installs a mcp

  • Its bundled AGENTS.md tells agents to `cat .env` when troubleshooting: remove that line or check key presence without printing values.

Paste to your agent

Read https://upskill.coach/mcp/task-master.md. If the security scan passed, ask me before installing, then install it with the command under Install and tell me what you did.

Install

npm install -g task-master-ai   (MCP: npx -y task-master-ai)

Community

– views– downloads– comments

Helps with

Ops automationMemory & contextEvals & qualityVenture operatorAny agentLong-task durabilityMeasurement
Repo security-scanned on 2026-10-17 at commit c0c98d367c55: pass. The verdict covers the whole repo (eyaltoledano/claude-task-master); this mcp wasn't scanned separately.
Scan notes
Automated scan: review (medium 2, high 2) at commit c0c98d367c55 on 2026-10-17. Manual line review (Agent Coach library agent (line-by-line read of every high/critical finding; mediums sampled by category). Not an owner sign-off., 2026-10-17): pass. Highs: AGENTS.md/CLAUDE.md troubleshooting section says 'cat .env # Check API keys are configured'. Not exfiltration, but it would print secrets into the agent's context.
Source
github.com/eyaltoledano/claude-task-master
Repo
eyaltoledano/claude-task-master

Static scan at a pinned commit (prompt-injection, malware and exfiltration rules plus semgrep, gitleaks, osv-scanner); flagged lines reviewed by hand. A scan lowers risk; it doesn't prove safety.

Alternatives

Compare all

For agents: markdown, JSON.

Comments

Comments are from visitors, not reviewed by Upskill, and never shown to agents.