teammode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited teammode (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run a named team of cooperating Codex threads under one leader, with durable state on disk. This is a Codex-only workflow. It is inspired by the lifecycle concerns in the Yeachan-Heo/oh-my-codex team skill, but it does not copy that runtime model and never depends on an external terminal runner - it coordinates through Codex's own thread tools plus a bundled state script.
Use a TEAM when EITHER holds:
more convenient - members will need to see and react to each other's findings; or
a fixed objective.
Use plain subagents ($ulw / multi_agent_v1.spawn_agent) - NOT a team - when EITHER holds:
A team buys cross-member coordination at a real overhead cost; only spend it when coordination is the thing you actually need.
The main session is ALWAYS the team leader; you orchestrate directly and never spin up a separate leader thread. Your job is orchestration, NOT writing product code: split the work and assign each slice, hold live situational awareness of every member, verify and QA what they deliver, relay findings between members, instruct and unblock, and synthesize the result. DELEGATE every code edit to a member - if you catch yourself editing product files while the team runs, that work was a member's slice you should have handed off. You own direction, verification, and integration (the merge), not the keystrokes.
A team is ALWAYS two or more members - never a single-member team. One worker on an isolated job is a subagent (multi_agent_v1.spawn_agent), not a team; if you end up with a single member, either split off a second distinct slice or drop the team and use a subagent.
Compose the team from what you actually KNOW about the work. Ground the split in real knowledge of the problem, then divide it into clear, non-overlapping responsibilities - one per aspect of the work - and give each member exactly one. No two members may own the same thing. Define each member by a concrete slice: a specific part of the codebase, an ownership area, or a distinct perspective/lens. Assigning a vague role ("backend dev", "release analyst", "the tester") is an anti-pattern - it gives the member no real boundary and invites overlap. Each member's focus names what they own concretely; the lens is one of area, ownership, or perspective. Give each member a short, distinct --name too - its role or what it watches (e.g. app-server-lifecycle, mailbox-delivery) - because that name titles its thread; never reuse one name for two members.
A bundled, dependency-free Node script owns all team state so you never author team.json or the member manual by hand. Run it with node (or bun); it works on macOS, Linux, and Windows. Replace <skill-root> with this skill's own directory.
node "<skill-root>/scripts/team.mjs" init --name "<team>" --session-name "<session>" [--session <leader_session_id>] [--worktree] [--base-branch dev]
node "<skill-root>/scripts/team.mjs" add-member --team <session_id> --id A --name "<short role>" --focus "<part/ownership/perspective>" --lens area|ownership|perspective --deliverable "<...>" [--branch <branch>]
node "<skill-root>/scripts/team.mjs" bind-thread --team <session_id> --id A --thread <thread_id> [--cwd <path>]
node "<skill-root>/scripts/team.mjs" member-prompt --team <session_id> --id A
node "<skill-root>/scripts/team.mjs" set-status --team <session_id> --id A --status reported|blocked|active|archived [--note "<...>"]
node "<skill-root>/scripts/team.mjs" worktree-add --team <session_id> --id A [--base-branch <branch>]
node "<skill-root>/scripts/team.mjs" worktree-remove --team <session_id> --id A [--force]
node "<skill-root>/scripts/team.mjs" integrate --team <session_id> [--id A]
node "<skill-root>/scripts/team.mjs" archive --team <session_id> [--id A]
node "<skill-root>/scripts/team.mjs" delete --team <session_id> [--force]
node "<skill-root>/scripts/team.mjs" status --team <session_id>init creates .omo/teams/{session_id}/ containing team.json (the single durable state file: team id, the main-session leader, the member roster, status, worktree config, and a lifecycle log), guide.md (the auto-generated member field manual), and artifacts/ (a shared exchange space). {session_id} is the leader's Codex session id when you can pass it via --session; otherwise the script generates a stable handle. Re-running init is a safe no-op. Every mutating subcommand rewrites guide.md, so the manual always matches the current team.
init the team, then add-member once per member.codex_app.create_thread - ALWAYS this tool for everymember, never a spawned agent - titled [team name] <member name>, using THAT member's own name (its role / what it watches), so no two threads share a title. add-member prints the exact title to use. If codex_app.create_thread accepts a working directory / cwd argument, set it to that member's worktree; otherwise the member's manual tells it to cd there first. Use codex_app.set_thread_title if the title did not land at creation.
bind-thread to record each thread id (and --cwd), then send that member's bootstraptrigger (printed by add-member / member-prompt) as the thread's first message. The trigger is short on purpose: it tells the new thread to READ its guide.md and team.json rather than carrying the whole protocol inline.
Every team member is a real Codex thread created with codex_app.create_thread - this is strict, not a preference. NEVER substitute multi_agent_v1.spawn_agent, or any other in-process subagent, for a team member: a spawned agent is an ephemeral helper that does not show up as a team thread, cannot carry the [team name] <member name> title, and cannot be inspected, titled, archived, or re-opened with the codex_app.* thread tools - which defeats the entire point of a durable team. A member only counts once you have bind-thread-ed it to a real codex_app.create_thread thread id. If the thread-creation tool is unavailable, STOP and say so (see Stop rules); do not quietly fall back to a spawned agent.
Members push to you and to one another with codex_app.send_message_to_thread; you inspect their state with codex_app.read_thread. So members can actually reach you, run init with --session <your own thread id> - that makes leader.sessionId in team.json a real, messageable thread; without it members cannot report to you and you are stuck polling. The generated manual binds members to the hard rules, so you mainly keep the channel open: expect frequent small inbound updates from each member - findings, WORKING:/BLOCKED: markers, peer digests - rather than one final dump, and act on them as they arrive. All member-to-member and member-to-leader traffic is in English; when the END user addresses a member, that member replies in the user's own language. Members hand off files and memos through the team artifacts/ directory and reference them by path. Wait for every required member's final report before you declare the team done.
The moment two members' slices would edit the same files, give each its own git worktree so they cannot clobber each other. Decide this whenever you see the collision - at team creation OR mid-run, not only up front. For each colliding member run worktree-add --team <id> --id <member>: it creates the worktree off the base branch on a derived branch, flips the team into worktree mode, records it in team.json, and prints the cd path to hand that member. The member works and commits only inside its own worktree. To land the work, integrate --team <id> merges every member branch into your current branch with a merge commit (never a squash or rebase); resolve any conflict it reports, then worktree-remove each worktree at cleanup.
When a decision-complete plan already exists at .omo/plans/<slug>.md (from ulw-plan), execute its parallel waves as a team instead of one todo at a time. Map it directly:
focus,and its acceptance criteria + QA become the member's deliverable.
concurrent members; a todo that depends on another waits, so launch the next wave only after the blocking members report.
Keep the plan file as the shared spec: point each member at its todo by path, and verify the member's result against that todo's acceptance criteria before you integrate.
DISBAND the team the moment it is no longer needed. A team exists only to do its work; once that work is done, or the user no longer wants it, do not leave it lying around - archive every member, then delete the team state. A finished team that is never disbanded is a leak.
archive closes the team: notify each active member, copy anything useful into artifacts/,archive each member thread with codex_app.set_thread_archived, then archive flips the team and all members to archived. If a thread-archive tool is unavailable, record that in the team log and tell the user - never pretend a member was archived.
delete removes .omo/teams/{session_id} and refuses while the team is unarchived or any memberis still active unless --force.
integrate --team <id> for a direct mergecommit, or push each member branch and open a PR. Then worktree-remove each worktree, archive, and delete. Cleanup is real work; respect the user's instruction on how to land it.
replies follow the user's language.
they are unavailable; say so instead of faking it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.