claude-subagent-creator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-subagent-creator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create well-scoped custom subagents Claude Code can auto-delegate to. A subagent is a Markdown file with YAML frontmatter plus a system-prompt body; it runs in its own context window with its own tool surface.
fan-out can target.For a one-off delegation, don't author a file — just use fan-out's inline spawn contract.
./.claude/agents/<name>.md (project) or ~/.claude/agents/<name>.md (user):
---
name: <hyphen-case, matches filename>
description: <what it does + WHEN to delegate to it — explicit triggers; this drives auto-selection>
model: opus # or sonnet / haiku / omit to inherit the session model
tools: Read, Grep, Glob, Bash # smallest surface that works; omit = inherit all
---
<system prompt: role, exact scope, output contract, hard boundaries>Use when ... with concrete triggers("Use when reviewing a diff for security issues"). The main agent matches this to decide delegation; vague descriptions don't get auto-selected.
opus for reasoning/review/debugging/planning; sonnet/haiku or inherit forread-heavy scans and inventories. Omit model: to inherit the session model.
Read, Grep, Glob, Bash); addEdit, Write only for workers that own a disjoint write surface.
file:line, commands run, findings + confidence, risks), and hard boundaries ("never edit outside your assigned files"; "you inherit no parent transcript — work only from this prompt").
/agents (or the Task tool withsubagent_type: <name>) that it loads and a trivial scoped task returns the contracted shape.
./.claude/agents/) — committed, shared with the repo, available in that project.~/.claude/agents/) — personal, available across all your projects.| Symptom | Fix |
|---|---|
| Agent never auto-delegated | weak description — add explicit "Use when" + trigger keywords |
| Agent over-reaches / edits too much | tighten tools: and the scope line in the body |
| Inconsistent results | pin model: opus; specify an exact return contract |
| Two agents fight over the same work | merge or sharpen responsibilities; one job each |
| Worker reverted another's edits | enforce disjoint write surfaces; read-only by default |
Use fan-out to delegate to the roles you create here.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.