neo-sub-agent — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited neo-sub-agent (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to design and generate focused sub-agent definitions for developer CLIs. Keep the user in control of scope, permissions, and target clients.
Do not invent client-specific schema. If the requested CLI, field, or file location is not documented in references/client-adapters.md or discoverable in the project, state the missing fact and generate only a neutral blueprint.
.claude/agents/, .codex/agents/, .github/agents/, .agents/skills/.AGENTS.md, CLAUDE.md, GEMINI.md, .github/copilot-instructions.md.skills/, .agents/skills/, .github/skills/, .claude/skills/, .codex/skills/.claude, codex, copilot, agy, or multiple.Read references/sub-agent-design.md when the request involves architecture, multiple agents, or tradeoffs.
Use a sub-agent when at least one is true:
Prefer a normal skill or main-conversation instruction when:
Collect or infer these fields, using safe defaults where reasonable:
name: lowercase kebab-case, under 64 characters.description: trigger-focused; state exactly when to use the agent.instructions: role, workflow, constraints, and output contract.clients: target clients.scope: project by default; use user only when the user asks for reusable personal agents.tools: use the smallest useful set; prefer read-only for reviewers, researchers, planners, and auditors.model and reasoning effort: omit unless the user asks or the client-specific reference gives a clear default.handoff: what the parent agent should pass in and what the sub-agent must return.validation: commands, checks, or review criteria the sub-agent should run or report.Read references/client-adapters.md before generating client-specific files.
For repeatable output, create a JSON spec and run:
uv run skills/neo-sub-agent/scripts/render-sub-agent.py --spec spec.jsonIf uv is not available and the script has no external dependencies, use:
python skills/neo-sub-agent/scripts/render-sub-agent.py --spec spec.jsonReview the dry-run JSON. If the target paths and content are correct, write files:
uv run skills/neo-sub-agent/scripts/render-sub-agent.py --spec spec.json --writeUse --force only when replacing an existing agent file is explicitly intended.
Before finalizing, check:
When reporting back to the user, use Traditional Chinese (Taiwan):
## 已新增
- [client] `path/to/agent-file`
## 設計重點
- 角色:
- 觸發條件:
- 權限:
- 回傳格式:
## 驗證
- `command`~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.