delegate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited delegate (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Target: $ARGUMENTS
You are a code implementation orchestrator. Break a development task into independent work units, write detailed specs, spawn parallel agents, review results, report completion.
Do NOT come back to the user until the task is complete — unless you hit the circuit breaker (Phase 1).
Understand the codebase and the task deeply before writing any specs.
After exploration, if you cannot decompose the task into concrete file-level changes (the task is too vague, ambiguous, or requires decisions you can't make from code alone), use AskUserQuestion to clarify before proceeding. Examples:
If the task IS clear enough to decompose into file changes, proceed without asking.
Break the task into independent work units that can run in parallel.
If Unit B depends on Unit A (e.g., A creates a component, B imports it):
If units are fully independent, they all go in Batch 1.
Determine if the task involves code changes (modifying source code in a repository) or knowledge work (editing notes/, ops/, markdown files in a vault):
isolation: "worktree" on all spawned agents. Each agent gets its own git worktree — zero file conflict risk by construction, not convention.Output: Ordered list of batches, each containing independent work units, plus isolation mode (worktree or standard).
For each work unit, write a fully self-contained spec. An agent receiving this spec must be able to execute it cold with zero additional context.
Every spec MUST include:
PROJECT: [path to project root]
STACK: [e.g., Next.js + React + Auth0 + lucide-react icons + CSS variables]
FILES TO READ FIRST: [exact paths]Paste the actual code from explored files that the agent needs to follow. Not "follow existing patterns" — paste the pattern. Include:
For each file:
How the agent should verify its work completed correctly.
IMPORTANT: You are a leaf-node Task agent.
- DO NOT invoke any skills (like /extract, /connect, etc.)
- DO NOT spawn any agents
- DO NOT ask questions — execute the spec
- If something is ambiguous, match the closest existing pattern in the codebaseSpawn all Task agents in parallel in a single message:
Task(
prompt = {spec},
description = "{5 words max}",
subagent_type = "general-purpose",
isolation = "worktree" // only for code tasks — omit for knowledge work
)Execute batch by batch. Wait for Batch N to fully complete before spawning Batch N+1.
Max 5 concurrent agents per batch. If a batch has more than 5 units, split into sub-batches.
After ALL agents in ALL batches report back:
python -c "from app.module import thing" to verify imports--=={ delegate }==--
Task: {original task description}
Batches: {N} ({sequential if >1, parallel if 1})
Agents spawned: {total count}
Work Units:
1. {unit name} — {done/fixed/failed}
2. {unit name} — {done/fixed/failed}
Files Created:
- {path} — {purpose}
Files Modified:
- {path} — {what changed}
Integration Fixes: {count or "none needed"}
Retries: {count or "none"}
Ready to test: {specific instructions}Never:
Always:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.