subagent-broker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited subagent-broker (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
"Sub-agents claim no Task tool access despite configuration stating tools: Read, Write, Edit, Task. CRITICAL rules are completely disregarded. No actual delegation occurs." — issue #5528
"Sub-Agent Task tool not exposed when launching nested agents." — issue #4182
The Task tool is the official delegation mechanism, but it fails silently when the delegation prompt isn't structured right:
subagent-broker ships the prompt skeletons that survive these pitfalls — distilled from the issue threads themselves.
| Template | When to use |
|---|---|
parallel-search | N independent searches at once (call all Task tools in one message) |
single-research | One open-ended exploration noisy in the main context |
cross-file-audit | Consistency review across files (front-load + re-assert the rule) |
known-target | Don't delegate — use Read/Grep directly |
independent-verification | Second opinion without anchoring on your conclusion |
${CLAUDE_PLUGIN_ROOT}/skills/subagent-broker/templates.pyparallel-searchsingle-researchcross-file-auditknown-target (don't delegate)independent-verification ${CLAUDE_PLUGIN_ROOT}/skills/subagent-broker/templates.py <name><files>, <specific concern>, etc.) tothe user's actual task. Then make the Task call yourself.
Task blindly. The user should see the proposeddelegation prompt and approve it before you fire.
the prompt, once in the response-format section. CRITICAL / ALWAYS keywords don't help; placement does. (issue #5528)
file they find if you don't tell them not to.
Task calls in twoconsecutive messages run sequentially. Two Task calls in the same message run in parallel.
For verification, withhold your analysis.
Delegate only when the subagent will make 3+ tool calls.
/claude-papercuts:subagent-brokeryourself with the adapted template — the user reviews the prompt first.
subagent's own output is the verdict.
shipped a queue + spawn system; we cut it because it duplicates what Anthropic's Task tool already does.
# List every template
${CLAUDE_PLUGIN_ROOT}/skills/subagent-broker/templates.py
# Print one ready to paste
${CLAUDE_PLUGIN_ROOT}/skills/subagent-broker/templates.py parallel-search
# Filter by keyword
${CLAUDE_PLUGIN_ROOT}/skills/subagent-broker/templates.py --search research
# Machine-readable
${CLAUDE_PLUGIN_ROOT}/skills/subagent-broker/templates.py --jsonIf Anthropic ships first-class delegation reliability (per issues #4182, #5528, #19077), the templates become less load-bearing and this skill can simplify or deprecate.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.