subagent-usage — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited subagent-usage (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Subagents are separate Claude instances spawned from your main session. They have their own context window, execute independently, and return results to the main session. Your main context stays clean.
Tasks that benefit from subagents:
The common thread: these tasks require context (reading files, understanding code) but that context doesn't need to persist in your main session.
Your main session has limited context. Every file you read, every long output you generate, consumes context. Subagents let you offload this:
Instead of:
Do:
patterns in tests/core/"
Parallel: when tasks are independent.
Sequential: when tasks depend on each other.
Don't spawn more than 2-3 parallel subagents. Each consumes resources and coordination overhead grows.
Some agents use git worktree to make changes without affecting your working tree:
How it works:
origin/HEAD (see gotcha below)Agents with worktree isolation: code-simplifier, test-writer, verify-app, bug-fixer, refactorer, doc-writer.
Both claude --worktree and the Agent isolation: "worktree" option create the worktree from origin/HEAD, not your current branch. If your working branch is ahead of whatever origin/HEAD points to (typically origin/main), the worktree will miss those commits.
Run worclaude doctor to diagnose. Fix locally with git remote set-head origin <your-branch> (reversible via --auto or main). The bundled bug-fixer, verify-app, and test-writer agents include a freshness preamble that resets their worktree to match the parent's current branch automatically; other worktree agents do not.
If you invoke claude --worktree directly (not via an agent), no preamble runs — sync the worktree manually before doing real work:
cd .claude/worktrees/<name>
git fetch origin && git reset --hard origin/<your-working-branch>Benefits:
Subagents start with zero context. They don't know what you've been doing. Give them:
and the three-way merge edge case."
Bad instruction: "Write some tests" Good instruction: "Write unit tests for detectScenario() in src/core/detector.js. Test all three scenarios: fresh (no .claude/), existing (.claude/ but no meta), upgrade (meta exists). Mock the filesystem. Use Vitest."
directory. If you need them to see your changes, commit first or use the same worktree.
that report consumes your context. Ask for concise results.
direction. They lack the conversational context to make those calls.
stash before spawning them.
The same instructions will produce the same failure.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.