agent-teams-command — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-teams-command (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
"Ender knew, even as he gave the order, that this was the way victory would come — not through strength, but through understanding." — Orson Scott Card
This is not a "feature" — this is a command system. You are not "using" Agent Teams. You are commanding a fleet. Based on Karpathy's Agentic Engineering framework, transforming Claude Code Agent Teams into a complete operational architecture.
| Principle | Meaning | Agent Teams |
|---|---|---|
| Trust Your Commander | Ender commands through squad leaders, not every soldier | Let Team Lead coordinate; you don't micromanage each agent |
| Understanding Over Strength | Study the enemy's thinking | Know each agent's capability; choose Opus vs Sonnet deliberately |
| Asymmetric Tactics | Solve problems in unexpected ways | Let agents QA each other; parallel multi-directional exploration |
Prompt
Use agent-teams-command for this project. Split work into roles, define ownership, coordinate progress, and verify the integrated result.Use Case
Expected Result
Output Example
Verification Case
Verified Effect
You (Commander) = Process Scheduler
Team Lead = CPU Core
Teammates = Parallel Processes
Task List = Shared Memory / IPC
Context Window = RAM (per agent, isolated)
Tools = System Calls
QA Loop = Error Correction / Interrupt Handler
Team Log = Durable Disk / Write-backUse agent teams only when parallel processes reduce wall-clock time or increase quality. Each process needs a bounded territory, explicit IPC, and an integration gate.
| OS concern | Team command rule |
|---|---|
| Process creation | Spawn only for independent or reviewable work. |
| Memory isolation | Give each teammate only the context needed for its scope. |
| IPC | Use task lists, handoff notes, and review reports. |
| Locks | Assign file/module ownership before work begins. |
| Interrupts | Stop or redirect agents when scope, safety, or quality drifts. |
| Join | Integrate only after each output has evidence. |
| Cleanup | Close agents and write lessons to wiki/logs. |
Avoid parallelism when the next step depends on a single blocking decision. Do that work locally, then delegate independent slices.
Before spawning agents, assume the environment has fog and friction: incomplete context, stale assumptions, noisy outputs, tool failures, and permission risk. Command the team as a risk-budgeted swarm, not a pile of helpers.
| Gate | Command rule |
|---|---|
| Survival first | Define the maximum acceptable blast radius per teammate. |
| No hero node | No single teammate owns planning, execution, verification, and write-back for a high-risk path. |
| Replaceability | Each teammate has a narrow role, bounded tools, and a handoff format another agent can continue. |
| Mechanical rebalancing | Define when to downweight, kill, replace, or add a reviewer based on cost, error rate, risk, or blocked state. |
| OODA low friction | Observe few signals, orient with the shared plan, decide from finite actions, act in reversible steps, and write back evidence. |
If you cannot name blast radius, kill condition, and verification evidence for a teammate, do not spawn that teammate.
Google I/O '26 described Antigravity as an agent-first development surface with subagents, hooks, async task management, and very large token budgets. Treat this as a cautionary operating pattern: swarm execution is useful only when the harness can prove progress.
Use a swarm only when all are true:
Do not scale agent count to create momentum. Scale only when isolation plus verification reduces wall-clock time or improves review quality.
Agent teams solve communication and coordination. Dynamic workflows solve width: a reviewed script launches many independent workers, then a synthesis step merges outputs.
Use a dynamic workflow instead of an agent team only when all are true:
Choose an agent team when roles need IPC, debate, dependency handoffs, shared judgment, or iterative repair. Choose a long-running goal when the hard part is depth: keep iterating until objective criteria pass.
Delegate macro actions, not vague wishes. Each teammate receives a bounded unit such as feature implementation, research, plan critique, test design, or adversarial review.
MACRO ACTION:
Objective:
Scope:
Non-goals:
Owned territory:
Inputs:
Risk budget / blast radius:
Allowed tools / denied actions:
Expected output:
Verification evidence:
Risk review:
Handoff target:
Stop condition:If two teammates need the same files, split by phase instead of parallel ownership. If proof is unclear, assign a researcher or evaluator before assigning a builder.
┌──────────────────────────────────────────────────────────────┐
│ Fleet Command System │
├──────────────────────────────────────────────────────────────┤
│ Phase 0: Plan — Task decomposition + resource allocation │
│ Phase 1: Act — Parallel multi-directional exploration │
│ Phase 2: Observe — Cross-validation + QA loop │
│ Phase 3: Iterate — Refine until quality threshold met │
│ Phase 4: Learn — Post-mission review + knowledge capture │
└──────────────────────────────────────────────────────────────┘You ──→ Team Lead ──→ Teammates
↓ ↓ ↓
Strategic Tactical Execution| Layer | Role | Responsibility | Karpathy Equivalent |
|---|---|---|---|
| Strategic | You (Ender) | Set goals, allocate resources, key decisions | Process Scheduler |
| Tactical | Team Lead | Task decomposition, agent coordination, quality monitoring | Main Agent Loop |
| Execution | Teammates | Execute, call tools, return results | Worker Processes |
// .claude/settings.local.json — Activate fleet command
{
"experimental.agentTeams": true,
"teammateMode": "auto"
}claude --version # Require ≥ v2.1.32Plan: Verify Agent Teams are available
Act: Create a 3-agent team for a simple task
Observe: Check multi-color panels are active
Iterate: If failed, check config and versionCreate a team of 3 teammates using Sonnet.
1. Front-end developer
2. Back-end developer
3. QA agent
Build me a landing page.Agent Teams = Multi-processing parallel system
Sub-agents = Single-threaded sub-processes| Architecture | Sub-agents | Agent Teams |
|---|---|---|
| Context | Isolated process, result returns to main | Fully isolated processes |
| IPC | Reports to main agent only | Direct inter-process messaging |
| Scheduling | Main agent manages all | Shared memory + self-scheduling |
| Token Cost | Lower | Higher (but significantly better quality) |
□ Each agent has clear system boundary (Own Territory)
□ Task list managed as shared memory
□ QA loop as error correction mechanism
□ Plan→Act→Observe iteration
□ Resource monitoring (Token cost)
□ Team log captures decisions, evidence, and reusable learningGOAL: [Strategic objective — sets context, like loading system prompt]
ORDERS: Create a team of [N] teammates using [MODEL].
RISK BUDGET:
Max blast radius per teammate: [files/actions/data/accounts]
Kill/downweight signals: [cost spike | repeated error | blocked | unsafe action]
Rebalance options: [replace | add critic | narrow scope | switch sequential]
Write-back target: [wiki/log/state file]
─── TEAMMATE 1 ─── Codename: [NAME] — Role: [ROLE]
TASK: [Specific task description]
OWNERSHIP: [file/module ownership]
PERMISSIONS: [allowed tools/actions; denied actions]
BLAST RADIUS: [maximum change or effect]
DEPENDENCY: Message [TEAMMATE] when done
─── TEAMMATE 2 ─── Codename: [NAME] — Role: [ROLE]
TASK: [Specific task description]
OWNERSHIP: [file/module ownership]
PERMISSIONS: [allowed tools/actions; denied actions]
BLAST RADIUS: [maximum change or effect]
DEPENDENCY: Wait for [TEAMMATE] to complete
─── TEAMMATE 3 ─── Codename: [NAME] — Role: QA
TASK: Validate all outputs
OWNERSHIP: tests/
DEPENDENCY: Wait for all teammates
DELIVERABLES:
1. [Deliverable 1]
2. [Deliverable 2]
3. QA report
4. Integration notes + residual risks
QUALITY GATES:
- [ ] All tests passing
- [ ] No critical QA issues
- [ ] No file ownership conflicts
- [ ] Token/time/request budget stayed inside cap
- [ ] Blast radius and permission limits held
- [ ] Each teammate reports changed files, evidence, and open risks
- [ ] High-risk outputs reviewed by a separate critic or red team
- [ ] Lessons, decisions, and risk adjustments written back| # | Principle | Engineering Meaning | Violation Consequence |
|---|---|---|---|
| 1 | Own Territory | Each module has a clear owner | File overwrites, logic conflicts |
| 2 | Direct Messaging | Inter-process IPC communication | Dependency blocking, serialization |
| 3 | Wait-for-Dependencies | Synchronization point management | Data inconsistency, race conditions |
In-process mode:
Shift+Down = Switch process context
Escape = Send interrupt signal (SIGINT)
Ctrl+T = View process table (task list)
Split-panes mode (tmux):
Each process in its own terminal
Color coding: Red(BE)/Green(FE)/Blue(QA)/Yellow(Research)Engineering equivalent of "design review" phase.
Spawn an architect teammate to refactor the auth module.
Require plan approval before they make any changes.Teammate (Plan Mode) → Submit design proposal
↓
Lead → Design review
├── Approved → Enter execution phase
└── Rejected → Revise and resubmitReview criteria (programmable quality gates):
"Only approve plans that include test coverage" → Test coverage gate
"Reject plans that modify the database schema" → Architecture protection gate
"Every plan must have a rollback strategy" → Rollback strategy gateSimilar to Karpathy's tool-call hook mechanism — triggers callbacks on key system events.
{
"hooks": {
"TeammateIdle": "python scripts/check-idle.py", // Process idle → reschedule
"TaskCreated": "python scripts/validate-task.py", // Task created → validate
"TaskCompleted": "python scripts/verify-quality.py" // Task done → quality check
}
}Classic systems engineering pattern: parallel sub-tasks within sequential phases.
PHASE 0 — Plan
3 researchers exploring different directions in parallel
↓ Sync point: All directions complete
PHASE 1 — Observe
Critic reviews all findings
↓ Sync point: Consensus reached
PHASE 2 — Act
Builder executes validated solution
↓ Sync point: Execution complete
PHASE 3 — QA (Iterate)
Full test + fix loop
↓ Exit when quality threshold metOptimal size: 3-5 agents (beyond → scheduling overhead > parallel gain)
Model selection: Sonnet (default) | Opus (complex reasoning) | Haiku (simple tasks)
Token budget: Each agent has independent context window
Cleanup protocol: Lead MUST execute cleanup (otherwise resource leak)
Write-back: Lead records decisions, evidence, and reusable lessonsMechanical rebalancing rules:
| Signal | Action |
|---|---|
| Same blocker twice | Narrow scope or switch to sequential execution. |
| Rising cost without evidence | Pause or downweight the teammate. |
| Unsafe or out-of-scope tool request | Kill or sandbox the process; add reviewer. |
| High-value uncertainty | Add a critic/researcher before adding a builder. |
| Integration conflict | Stop parallel writes and join through the lead. |
For long-horizon builds, add a budget envelope before launch:
Max agents:
Max wall-clock:
Max tool calls / model requests:
Max token or cost estimate:
Checkpoint cadence:
Kill condition:1. "Ask [teammate] to shut down" → Send termination signal
2. Wait for confirmation → Graceful shutdown
3. Repeat until all teammates down → All processes terminated
4. "Clean up the team" → Release shared resourcesDetailed campaign templates live in references/classic-campaigns.md to keep the executable skill short. Use them for full-stack builds, technical decision research, and security audit/fix work when a concrete order format is needed.
[Phase 0: Plan]
□ Tasks decomposed into parallelizable sub-tasks
□ Each sub-task has clear owner and boundary
□ Each sub-task has risk budget, blast radius, and kill/downweight condition
□ Each macro action has non-goals, proof, and stop condition
□ Dependencies modeled
□ Team vs dynamic workflow vs long-running goal choice is justified
[Phase 1: Act]
□ Agents launched in parallel per plan
□ No file ownership conflicts
□ Inter-process communication normal
□ Permission and blast-radius limits held
□ Agent count, wall-clock, request count, and token budget inside cap
□ Generated workflow scripts reviewed before execution when used
[Phase 2: Observe]
□ QA loop executed
□ High-risk outputs passed adversarial review
□ Rebalancing decisions applied when agents drifted, stalled, or exceeded budget
□ Issues fed back to corresponding agent
□ Re-verified after fixes
[Phase 3: Iterate]
□ Quality met → exit loop
□ Not met → continue iteration
□ OODA loop stayed low-friction: few signals, finite decisions, reversible actions
□ Max iterations exceeded → escalate to commander
[Phase 4: Learn]
□ Post-mission report generated
□ Lessons captured in knowledge base
□ Risk budget and rebalancing lessons written back
□ Applicable to future campaigns
□ Teammates closed or explicitly handed off| Symptom | Root Cause | System-Level Solution |
|---|---|---|
| Agent file overwrites | No ownership protocol | Enforce Own Territory |
| Task deadlock | Dependency cycle | Simplify dependency graph, avoid cycles |
| Token explosion | Agent count >10 | Limit to 3-5 agents |
| Insufficient context | Missing initial instructions | Full context in GOAL (like system prompt) |
| Resource leak | Lead didn't run cleanup | Enforce cleanup protocol |
| Fast but fragile output | Vibe coding without quality ceiling | Add spec, evaluator, and proof gate |
| Swarm gets noisy | No shared OODA frame | Reduce signals, freeze plan, route updates through lead |
| One agent becomes hero node | Too much authority in one process | Split planner/builder/evaluator/write-back roles |
| Agent spends without proof | No mechanical rebalancing | Downweight, narrow scope, or kill based on predeclared signal |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.