sub-agent-creator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sub-agent-creator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Interactive skill for creating Claude Code subagents. Guides the complete process: gathering requirements, designing the agent's purpose and persona, selecting helpful skills and documentation, and writing a properly formatted agent file to .claude/agents/.
Subagents MUST follow strict formatting or they will fail validation and not load:
| Rule | Requirement | Consequence |
|---|---|---|
| Single-line description | description must be one line, no \n | Validation failure |
| No literal `\n` | Use actual newlines in body, not \n escapes | Validation failure |
| Valid colors only | If specified: red, blue, green, yellow, purple, orange, pink, cyan | Agent won't load |
| Valid models only | sonnet, opus, haiku, or inherit | Validation failure |
| Name format | Lowercase letters, numbers, hyphens only | Validation failure |
# WRONG - Multi-line YAML syntax
description: |
Expert code reviewer.
Use after code changes.
# WRONG - Actual newlines in value
description: Expert code reviewer.
Use after code changes.
# RIGHT - ONE continuous line
description: Expert code reviewer. Use proactively after code changes.# WRONG - Literal \n in body
---
name: test-runner
description: Run tests
---
You are a test runner.\nWhen invoked:\n1. Run tests\n2. Report results
# RIGHT - Actual newlines
---
name: test-runner
description: Run tests
---
You are a test runner.
When invoked:
1. Run tests
2. Report resultsWhen this skill triggers, the user has described what kind of agent they want. First, extract:
Ask clarifying questions using the AskUserQuestion tool. Confirm:
inherit. Only suggest haiku for simple, fast tasks. ALWAYS confirm before using non-inherit models.Search the workspace for:
Relevant skills: Check .claude/skills/ and project skills that would help the agent.
ls .claude/skills/Relevant documentation: Look for references files, CLAUDE.md, API docs, etc.
find . -name "*.md" -type f | head -20Using the agent creation architect framework (see references/agent-creation-prompt.md):
The system prompt should be in second person ("You are...", "You will...").
Write the agent file to .claude/agents/<identifier>.md:
---
name: <identifier>
description: <single-line description with when to use>
model: inherit
---
<system prompt in markdown body>Default settings:
model: Always inherit unless user confirms otherwisetools: Omit to allow all tools (user preference: never restrict)skills: Include if specific skills would help the agentRun the validation script:
python .claude/skills/sub-agent-creator/scripts/validate_agent.py .claude/agents/<identifier>.mdOnly proceed if validation passes. Fix any errors and re-validate.
---
name: agent-identifier
description: Brief single-line description starting with what it does. Use proactively when [trigger condition].
model: inherit
skills:
- relevant-skill-1
- relevant-skill-2
---
You are an expert [domain] specialist.
When invoked:
1. [First step]
2. [Second step]
3. [Continue as needed]
Your approach:
- [Guideline 1]
- [Guideline 2]
For each [task], provide:
- [Output format 1]
- [Output format 2]
Focus on [core principle].The description field is Claude's primary signal for when to delegate. Include:
Examples:
description: Test execution specialist. Use proactively after writing tests or modifying test files.
description: Database query analyst. Use when needing to analyze data or generate reports from BigQuery.
description: Code archaeology expert. Use when exploring legacy codebases or understanding unfamiliar code.After creating an agent, verify it appears in /agents command output.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.