code-subagents — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited code-subagents (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Fresh subagent per task. One combined review per completed batch. Parallel when independent, sequential when dependent.
Use when (all must hold):
design.md already specifies what the file contains(types, signatures, schema, contract, or an existing pattern to copy)
Prime candidates are new files, scaffolding, boilerplate, and pattern-following edits. Parallelism is a separate question: dispatch two or more eligible items concurrently only when the independence check below passes.
Don't use when:
Tasks with dependencies execute one at a time. Each gets a fresh subagent — no context pollution from previous tasks.
Task 1 (Entity) → review → complete
Task 2 (Repository, depends on T1) → review → complete
Task 3 (Service, depends on T2) → review → completeIndependent tasks dispatch simultaneously. One agent per problem domain.
Task A (auth tests) ──→ review → complete
Task B (billing tests) ──→ review → complete ← concurrent
Task C (notification tests) ──→ review → completeIndependence check: Would fixing Task A affect Task B? Would they edit the same files? If no to both, dispatch in parallel.
For shared-tree parallel work:
git status, including untracked files, before and after each taskSelect the agent explicitly for every dispatch (see Delegation in atelier-orchestrator). Give implementers the design excerpt so they make no design decisions: mechanical file creation should match a scaffolder; design-sensitive implementation may use the harness's general agent, the one permitted exception to selecting from Atelier's agents. The batch reviewer is a read-only critical review.
Use these templates when dispatching subagents. Each template is battle-tested — don't improvise, use them as-is and fill in the variables.
requirements; do not make the subagent recover context
| Mistake | Fix |
|---|---|
| "Fix all the tests" | "Fix the 3 failures in user.test.ts" |
| No context about codebase | Paste the relevant patterns and conventions |
| No constraints | "Do NOT change production code" or scope to specific files |
| Vague output expectations | "Return: root cause, changes made, test results" |
Run one combined review after every completed batch, not separate reviews for each task.
Give one fresh reviewer:
The reviewer checks both requirements compliance and code quality:
Use references/batch-reviewer-prompt.md as written.
If the reviewer finds Critical or Important issues, send each issue back to the relevant implementer, refresh its path-scoped patch, and review the batch again. Minor issues may be noted and moved past.
Subagents may ask questions before or during implementation. This is good — it means they're thinking rather than guessing.
After subagents complete (especially parallel dispatch):
If there are conflicts between parallel results, resolve them manually. Don't dispatch another subagent to merge — that requires too much context.
If a subagent fails a task:
need revision.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.