claude-agents-plus — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-agents-plus (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When this skill is activated, you MUST follow this protocol exactly:
Violation of this protocol defeats the purpose of multi-agent orchestration.
User Message
│
▼
┌──────────────────────────────────────┐
│ 1. COMPLEXITY ASSESSMENT │
│ Is this a simple task? │
└──────────────────────────────────────┘
│
├─ YES (simple) ──▶ Handle directly, skip orchestration
│
└─ NO (complex) ──▶ Continue to orchestration
│
▼
┌──────────────────────────────────────┐
│ 2. TASK DECOMPOSITION │
│ Break into independent subtasks │
│ Identify required skills │
└──────────────────────────────────────┘
│
▼
┌──────────────────────────────────────┐
│ 3. SUBAGENT DISPATCH │
│ Spawn 1-6 subagents │
│ Each gets clear mandate │
└──────────────────────────────────────┘
│
▼
┌──────────────────────────────────────┐
│ 4. EXECUTION & COLLECTION │
│ Subagents work in parallel │
│ Main agent monitors progress │
└──────────────────────────────────────┘
│
▼
┌──────────────────────────────────────┐
│ 5. SYNTHESIS & REPORT │
│ Merge results │
│ Verify consistency │
│ Report to user │
└──────────────────────────────────────┘[ASSESSMENT]
Task: <brief description>
Complexity: SIMPLE | COMPLEX
Reason: <why>
Domains: <list if complex>
Subtask count estimate: <1-6 if complex>
[/ASSESSMENT]For complex tasks, decompose into independent subtasks:
[SUBTASK #N]
Title: <descriptive name>
Domain: <frontend|backend|database|devops|testing|research>
Dependencies: <none | list of subtask numbers>
Skills: <which skills this subagent needs>
Scope: <specific files, functions, or areas>
Deliverable: <what this subagent produces>
[/SUBTASK #N]Based on subtask domain, activate relevant skills:
| Domain | Skills to Activate |
|---|---|
| Frontend | senior-frontend, ui-design-system |
| Backend | senior-backend, api-design-reviewer |
| Database | sql-database-assistant, database-designer |
| Testing | tdd-guide, playwright-pro |
| DevOps | senior-devops, ci-cd-pipeline-builder |
| Security | security-review, senior-secops |
| Full-stack | senior-fullstack |
| Research | research-summarizer |
| Scenario | Count | Rationale |
|---|---|---|
| 2-3 independent workstreams | 2-3 | Natural parallelism |
| Frontend + Backend + DB | 3 | One per layer |
| Large refactor (multiple modules) | 4-5 | One per module area |
| Complex feature (many concerns) | 5-6 | Maximum parallelism |
| Sequential dependencies | 1-2 | Limited parallelism |
For each subtask, spawn a subagent with:
Agent(subagent_type: "implementer", prompt: """
You are Subagent #N in a multi-agent orchestration.
YOUR TASK: <subtask title>
SCOPE: <specific files/areas to modify>
CONSTRAINTS:
- Only modify files in your scope
- Follow existing code patterns
- Do not introduce new dependencies without approval
- Output format: <expected deliverable>
CONTEXT:
<relevant background from main agent>
INSTRUCTIONS:
<step-by-step what to do>
""")Implementation with TaskCreate/TaskOutput:
TaskCreate(subject: "Subtask 1: Backend API", description: "...")
TaskCreate(subject: "Subtask 2: Frontend", description: "...") TaskUpdate(taskId: "1", status: "in_progress") Agent(subagent_type: "implementer", run_in_background: true, prompt: "...") TaskList() // See all tasks
TaskGet(taskId: "1") // Check specific task TaskUpdate(taskId: "1", status: "completed")Monitoring Rules:
If a subagent fails:
Collect from each completed subagent:
Check for:
[ORCHESTRATION REPORT]
Task: <original task>
Subagents: <N> spawned, <M> successful
Summary:
<what was accomplished>
Changes:
1. <file/component>: <what changed>
2. <file/component>: <what changed>
...
Decisions:
- <key decision 1>: <rationale>
- <key decision 2>: <rationale>
Warnings:
- <any issues or caveats>
Next Steps:
- <suggested follow-up actions>
[/ORCHESTRATION REPORT]This skill orchestrates via Claude Code's Agent tool:
a. Decompose into subtasks b. Create TaskCreate entries for tracking c. For each subtask, spawn Agent with:
subagent_type: "implementer" (has Read/Write/Edit/Grep/Glob/Bash)d. Collect results via TaskOutput or Agent returns e. Synthesize and report
| Type | Best For |
|---|---|
| implementer | Code changes, file modifications |
| researcher | Read-only investigation, no writes |
| code-reviewer | Reviewing changes for issues |
| test-runner | Running and validating tests |
| architect | Design decisions, no implementation |
| Type | Description | Strategy |
|---|---|---|
| None | Fully independent | Spawn all in parallel |
| Sequential | A → B → C | Spawn in order, wait for each |
| Data | B needs A's output | Spawn A first, pass output to B |
| Shared | A and B share resources | Coordinate via main agent |
Subtask 1: Database schema (no deps) → spawn first
Subtask 2: Backend API (depends on 1) → wait for 1, then spawn
Subtask 3: Frontend (depends on 2) → wait for 2, then spawnSubtask 1: Research existing patterns → spawn, collect findings
Subtask 2: Implement based on research → spawn with findings as contextWhen orchestrating, activate relevant skills for each subtask:
Skill(skill: "senior-frontend") // if frontend work
Skill(skill: "sql-database-assistant") // if database work The following skills are active for this task:
- senior-frontend: Use React/Next.js patterns
- tdd-guide: Write tests first| Subtask Domain | Skills to Activate |
|---|---|
| Frontend | senior-frontend, ui-design-system |
| Backend | senior-backend, api-design-reviewer |
| Database | sql-database-assistant, database-designer |
| Testing | tdd-guide, playwright-pro |
| DevOps | senior-devops, ci-cd-pipeline-builder |
| Security | security-review, senior-secops |
| Full-stack | senior-fullstack |
| Research | research-summarizer |
User: "Add user authentication with JWT, including login/register API endpoints, frontend forms, and database migrations"
Assessment:
[ASSESSMENT]
Task: Add JWT auth with API + frontend + DB
Complexity: COMPLEX
Reason: 3 domains (backend, frontend, database), 4+ files
Domains: backend, frontend, database
Subtask count estimate: 3
[/ASSESSMENT]Decomposition:
Dispatch: 3 subagents, one per layer
Synthesis: Merge results, verify API-frontend contract, check migration applies cleanly
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.