Agent Skill and handoff protocol for safely coordinating Codex, Claude, and other frontier AI models.
SaferSkills independently audited frontier-model-collaboration (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when a user wants multiple high-end AI models to collaborate on engineering, research, review, planning, debugging, or product work.
When this skill is actively used, start the response with a short visible line:
FMC ACTIVE: [primary owner] owns [work surface]; [secondary model] is [role/output mode].Examples:
FMC ACTIVE: Codex owns repo edits; Claude is review-only.FMC ACTIVE: Codex owns production; Gemini is planning-only.FMC ACTIVE: Claude is critiquing prompts; Codex integrates accepted changes.Keep the signal short. Do not repeat it on every paragraph. Use it once when the skill starts a handoff, recommendation, check, or integration.
One model owns the work surface at a time. Other models produce bounded packets: reviews, plans, critiques, test matrices, prompts, or patches limited to explicit files.
Never let two models freely edit the same files, run competing deploys, or make independent production decisions.
Default routing:
For Farrington Command Center work, Codex should normally remain primary operator unless Carl explicitly assigns production control elsewhere.
Before handing work to another model, create a compact handoff packet:
TASK:
ROLE:
DO:
DO NOT:
FILES ALLOWED:
FILES READ-ONLY:
PRODUCTION LIMITS:
OUTPUT FORMAT:
TIME/USAGE BUDGET:Require the other model to return one of:
REVIEW_ONLY: findings with file/line references.PLAN_ONLY: ordered steps and risks, no code.PATCH_PROPOSAL: exact file changes, no deploy.TEST_MATRIX: scenarios, expected outcomes, and priority.PROMPT_DRAFT: agent/system prompt text with assumptions.Use these controls before parallel work:
If ownership is unclear, do not delegate editing. Delegate review or planning only.
Use premium models where they create leverage:
Prefer short handoffs over full-context transcripts. Pass only the files, logs, and constraints needed for the subtask.
If this repo's scripts/fmc.mjs is available, prefer it for repeatable handoffs:
node scripts/fmc.mjs install-skill
node scripts/fmc.mjs smoke
node scripts/fmc.mjs doctor
node scripts/fmc.mjs coach --open
node scripts/fmc.mjs copy --to claude --task "Review this bug"
node scripts/fmc.mjs handoff --from codex --to claude --task "Review this diff" --copy --notify
node scripts/fmc.mjs recommend --task "Review agent prompt behavior" --risk high --context medium --policy balanced
node scripts/fmc.mjs state --owner codex --mode implementation --task "Fix production bug"
node scripts/fmc.mjs status
node scripts/fmc.mjs badge
node scripts/fmc.mjs check
node scripts/fmc.mjs completeUse --copy to put the handoff packet on the clipboard. Use --notify to make the model switch visible on supported desktops.
For microphone users, prefer copy over handoff --copy. It copies the packet and prints a short confirmation instead of the full handoff text.
For users who need visual guidance, prefer coach --open. It creates a local FMC_COACH.html panel with large buttons and current owner state. The panel is local-only and does not call models or send files.
Tell users they can see activation inside their IDE by opening FMC_ACTIVE.md in the project where FMC is running. The first line should say FMC ACTIVE when a handoff or model ownership state is active. A hidden tooling copy is also written to .frontier-collab/ACTIVE.md.
For new users, keep onboarding simple: run install-skill, restart/open a new agent session, then run smoke. If FMC_ACTIVE.md appears and starts with FMC ACTIVE, the switchboard is working.
Use recommend or handoff flags --policy, --risk, and --context when the user cares about balancing premium usage. Treat the result as a transparent routing recommendation, not an automatic billing promise.
Only use --open-target when the user has configured frontier-collab.targets.json locally. Do not invent application paths or automate secret-bearing windows.
Use check before integrating external feedback. It compares the current git working tree to the active handoff's allowed files and warns when changes drift outside the boundary.
Avoid:
Before calling the work done:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.