ultracode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ultracode (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run a supervised workflow for work that needs planning, packetization, native agent delegation, integration, and verification.
This is a skill, not a runtime. It works by giving the current coding agent a disciplined operating procedure. It can be used in Codex, Claude Code, Antigravity, or another host that loads SKILL.md, but the host's own system rules and available tools always win.
ultracode, $ultracode, or "ultra code" request as permission to choose delegated mode when the host allows that interpretation.spawn_agent for useful independent packets when the request clearly invokes Ultracode or otherwise asks for subagents, delegation, parallel agents, a swarm, or equivalent agent work.Use the smallest workflow that can prove the result. Do not create ceremony for small tasks.
Before acting, classify the task:
Then choose one mode.
Use for small, clear tasks that do not benefit from packets.
Examples:
Behavior:
Use when the task has multiple phases, meaningful uncertainty, or enough risk to benefit from separated work packets.
Examples:
Behavior:
plan.md, orchestration.md, state.json, packet files, result notes, integration.md, and final-report.md.results/.Use when the host exposes native agent delegation, the task has independent packets, and delegation is permitted under that host's rules.
Strong delegation wording includes:
An explicit ultracode, $ultracode, or "ultra code" invocation can also be treated as delegation permission when the host allows the skill to choose its own workflow depth. If host policy is stricter, use workflow mode.
Behavior:
explorer agents for read-only questions and worker agents for concrete code changes when available.If native delegation is unavailable, fall back to workflow mode and say so briefly.
Use the native primitive exposed by the current host. If the named primitive is unavailable in the current session, use workflow mode.
| Host | Preferred primitive | Notes |
|---|---|---|
| Codex | spawn_agent, then wait_agent, send_input, or close_agent as needed | Use explorer for read-only packets and worker for bounded write packets. Treat $ultracode as delegated-workflow intent when policy permits; if policy blocks delegation, fall back to workflow mode and say so. |
| Claude Code | Native Task/subagent or dynamic workflow tool, when exposed | If only the skill text is available, write packet artifacts and execute isolated parent-session passes. |
| Antigravity | Native agent/task primitive, when exposed | If no delegation primitive is present, use workflow mode with packet artifacts. |
| Other hosts | Closest native agent/task primitive | Never invent a runner. Fall back cleanly when no primitive exists. |
When running inside Codex and delegated mode is selected:
spawn_agent tool. Do not try to launch agents through Python, shell scripts, subprocesses, or local workflow files.explorer agents for independent read-only discovery, tracing, risk review, test discovery, and verification planning.worker agents only for bounded implementation packets with explicit, non-overlapping ownership.agent_type to explorer or worker, do not also request a full-history context fork. Use a self-contained prompt with the repo path and packet context, or omit agent_type when a full-history fork is required.You are not alone in the codebase. Do not revert edits made by others. Adapt to nearby changes.spawn_agent is available and the request invokes Ultracode or explicitly mentions agents, parallel work, delegation, a swarm, or splitting across agents, prefer real spawned agents over simulated packet passes whenever host policy permits it.spawn_agent is unavailable, permission is not clear, or no independent packet would benefit from an agent, use workflow mode with packet files and record the concrete no-delegation reason.Run root rule:
.workflow/ultracode/..context/ultracode/ only when workspace instructions explicitly name .context/ as the scratch area.Default run root:
.workflow/ultracode/Workspace override, only when instructed:
.context/ultracode/Run layout:
<run-root>/<slug>/
plan.md
orchestration.md
state.json
packets/
results/
integration.md
final-report.mdCreate optional heavy artifacts only when they reduce risk:
eval-contract.md # full contract only
contracts/ # only when one packet produces a surface another consumes
handoffs/ # only when separate handoff files reduce integration risk
final-audit.md # high-risk or full-contract runsRead references/packet-schema.md when filling packet files, result files, orchestration.md, or state.json.
Before splitting work, choose the smallest contract level:
none: tiny direct task.inline: ordinary workflow or delegated task. Put 5-12 lines in plan.md.full: high-risk, cross-surface, migration, public API/schema/CLI/UI flow/auth/data contract, or write-capable agents sharing integration surfaces.Inline contract template:
Eval contract:
- Outcome:
- Shared surfaces:
- Required checks:
- Blocking conditions:
- Handoff evidence:Read references/eval-contracts.md before creating a full contract.
Keep plan.md concrete. Include:
For non-trivial workflow mode after explicit Ultracode, include the concrete reason native agents were not used.
Do not let the plan replace execution.
Keep orchestration.md short and operational. Include:
Use it as the execution contract, not as a transcript.
Before spawning or invoking another agent:
Never use delegation to avoid understanding the integration path.
Ask one clear approval question before:
If approval is missing, continue only with safe read-only work, local drafts, or non-destructive checks.
Read references/approval-gates.md when risk is ambiguous.
Good packets are narrow, bounded, and evidence-based.
Good read-only packets:
Good write-capable packets:
Bad packets:
For code-edit packets, assign non-overlapping files or modules.
Read-only agent prompt shape:
You are working in the same repo as other agents.
Task:
<specific read-only objective>
Do:
- inspect only the sources listed below unless one nearby hop is required
- cite file paths and line numbers where possible
- return concise findings with evidence
Do not:
- edit files
- run destructive commands
- duplicate other packet work
Expected output:
- summary
- evidence
- risks
- recommended parent actionWrite-capable agent prompt shape:
You are not alone in the codebase. Other agents may edit other files.
Do not revert edits made by others. Adapt to nearby changes.
Ownership:
<files or module>
Task:
<specific implementation task>
Do:
- edit only the owned files unless blocked
- add or update focused tests if the owned area has tests
- list changed files in your final answer
Do not:
- change public behavior outside this packet
- run broad formatting over unrelated files
- rewrite unrelated code
- commit, push, publish, or deploy
Expected output:
- files changed
- summary
- verification run
- risks or blockersThe parent session owns integration.
After packet work:
integration.md.state.json.Never paste raw agent logs as the final answer.
Choose checks by risk.
Low risk:
Medium risk:
High risk:
Final audit rules:
plan.md, orchestration.md, and the full contract when present.pass, fail, trust-prior, or skipped.final-report.md.final-audit.md for high-risk or full-contract runs.Report skipped checks honestly.
Keep the final answer shorter than final-report.md. Include:
references/packet-schema.md when creating packet files, result files, orchestration.md, or state.json.references/eval-contracts.md before full contracts or cross-surface delegation.references/approval-gates.md before risky or ambiguous work.references/execution-examples.md when mode behavior is unclear.references/forward-testing.md when testing or improving this skill.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.