orchestrator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited orchestrator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Coordinate large implementations by acting as a planning-and-verification layer. Your job is to define phases, spawn focused sub-agents, and integrate their output — not to write code yourself.
This skill is the execution half of a two-skill pipeline:
product-requirements-builder — produces the PRD and RFCs (the what and how)orchestrator (this skill) — executes them by coordinating sub-agents (the doing)If no PRD/RFCs exist yet, use product-requirements-builder first. The orchestrator works best when it has a PRD and a set of RFCs to work from — they define the scope boundaries that prevent sub-agents from drifting.
Before anything else, assess the task:
Is this task...
Single file or focused area?
↓ Yes → Implement directly. This skill is not needed.
2–5 files, one feature, sequential steps?
↓ Yes → Plan in tasks/todo.md, implement in main agent.
3+ independent features, multi-RFC, or parallel work?
↓ Yes → Use this skill. Continue below.Signals that warrant orchestration:
Signals that do NOT warrant orchestration:
You plan, coordinate, and verify. You do not write implementation code.
Your outputs are:
Before defining any phases or spawning sub-agents, read:
product-requirements-builder, typically at PRD/PRD-[ProjectName].md or Product requirements/PRD-[ProjectName].mdRFC-000) — project structure, conventions, DI approach, naming rulesRFC-001) — entity names, field types, relationships, constraintsIf no PRD or RFCs exist, stop and use the product-requirements-builder skill first. Orchestrating without clear scope boundaries causes sub-agents to drift and conflict.
This prevents sub-agents from producing conflicting code. Understanding the data model and naming conventions is critical — inconsistencies here cascade across the entire implementation.
Decompose the implementation into phases where:
Common phase structure:
Phase 1 — Foundation (sequential)
1A: Project setup / scaffolding
1B: Data models (after 1A)
Phase 2 — Core Services (parallel, after Phase 1)
2A: Repository + use cases for Feature A
2B: Repository + use cases for Feature B
2C: Repository + use cases for Feature C
[Integration checkpoint before Phase 3]
Phase 3 — UI Features (parallel, after Phase 2)
3A: Shared UI components
3B: Feature A screens
3C: Feature B screens
[Integration checkpoint before Phase 4]
Phase 4 — Navigation & Integration (after Phase 3)
4A: App shell, tab bar, routing, settingsAdjust to the project. A smaller project might only need 2 phases. The key invariant: every sub-agent in a phase can start without waiting for siblings.
Before spawning any sub-agents, write your plan to tasks/todo.md:
# Orchestration Plan — [Project Name]
## Phase 1 — Foundation
- [ ] 1A: [scope] — depends on: nothing
- [ ] 1B: [scope] — depends on: 1A
## Phase 2 — [Name] (parallel)
- [ ] 2A: [scope]
- [ ] 2B: [scope]
- [ ] Integration checkpoint
## Phase 3 — [Name] (parallel)
- [ ] 3A: [scope]
- [ ] ...
- [ ] Integration checkpoint
## Phase 4 — [Name]
- [ ] 4A: [scope]
## Final Verification
- [ ] End-to-end checklistMark items complete as phases finish.
For each sub-agent, construct a context brief using this template:
You are implementing [feature/RFC name] for [project name].
Project context:
- [Tech stack, one line]
- [Key conventions: naming, DI, money/ID rules, etc.]
- [Critical shared components this agent must use but not reimplement]
Read these files before writing any code:
- [RFC document path]
- [Related files to understand before modifying]
- [Shared components or utilities this feature depends on]
Your task:
[Specific deliverables — file paths, what each file must contain]
[Explicit scope: "Do NOT implement X — that is handled elsewhere"]
Build and verify your work compiles before reporting back.See references/orchestration-patterns.md for full examples.
Within a phase: spawn all parallel sub-agents in a single message (one Agent tool call per sub-agent, sent simultaneously).
Between phases: wait for all sub-agents in the current phase to complete and pass integration review before spawning the next phase.
After each phase completes, verify before proceeding:
Code consistency checks:
nil/stub values remain in the dependency injection containerArchitectural checks:
Int64 cents, not Double)Build check:
If any sub-agent produced conflicting or incomplete output, fix it before moving forward. Do not accumulate drift across phases.
After all phases complete, verify end-to-end:
You are implementing the Accounts feature (RFC-013) for [App Name].
Tech stack: Swift 6, SwiftUI, SwiftData, async/await, @Observable ViewModels.
Money rule: all amounts as Int64 cents, never Double.
UUID rule: all IDs are UUID, generated client-side.
Architecture: Clean Architecture — UI → Domain (Use Cases) → Data (Repositories).
Read these files before writing any code:
- PRD/rfc-013-accounts.md
- PRD/rfc-001-data-models.md (for AccountModel schema)
- PRD/rfc-000-architecture.md (for AppContainer, folder structure)
- Core/AppContainer.swift (you will add account dependencies here)
Your deliverables (all file paths relative to project root):
- Core/Data/Repositories/AccountRepository.swift (protocol)
- Core/Data/Repositories/SwiftDataAccountRepository.swift (implementation)
- Core/Domain/UseCases/Accounts/SaveAccountUseCase.swift
- Core/Domain/UseCases/Accounts/FetchAccountsUseCase.swift
- Update Core/AppContainer.swift to wire accountRepository and account use cases
Do NOT implement: account UI screens (that is a separate sub-agent).
Do NOT reimplement: PersistenceController or any existing shared utilities.
Build and confirm the project compiles before reporting back.example-implementation-prompt.md at the project root for a complete real-world orchestration prompt (Kasa iOS app, 4 phases, 12 sub-agents)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.