Agent Collab Skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agent Collab Skills (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
繁體中文 · Public harness contract · Native lanes · 0.6 migration · 0.5 goal-slice migration · 0.4 migration
Provider-neutral collaboration skills plus an optional, standard-library-first Python harness for bounded, resumable, human-authorized agent work.
This project is a governance layer, not a general agent runtime. A host supplies models, tools, sessions, sandboxes, and tracing. Agent Collab supplies portable roles, policy evaluation, checkpoints, proposal-only memory, reconciliation, and acceptance evidence.
flowchart LR
H[Human decision owner] --> P[Primary agent]
P --> S[Task splitter]
S --> E[Delegated executor]
S --> R[Reviewer]
E --> C[Task checkpoint]
R --> C
C --> Y[Canonical policy evaluation]
Y -->|continue| S
Y -->|checkpoint| P
Y -->|stop| Q{Stop scope}
Q -->|action| X[Diagnose or wait]
Q -->|goal| B[Explicit blocker]
E --> O[Acceptance gate: reconcile]
R --> O
O --> A[Acceptance evidence]
A --> H
H -->|approve / decline / revise| D[Append-only human decision]The deterministic layer controls state and limits. Agents produce prose, implementation, review, and synthesis. A human remains responsible for breaking contracts, memory promotion, semantic acceptance, and shipping.
Each skill fires on a situation, not only on a request:
| Skill | Use when | Responsibility |
|---|---|---|
agent-task-splitter | about to run two or more subagents, workflow lanes, or delegates on one goal | Fan-out planner: one lane table with role, model tier, disjoint write scope, bounded brief, and capped return per lane, plus the merge and verification step fixed before launch. |
agent-context-budget | launching parallel or background lanes, or a result or handoff is larger than a short summary | Cap returns (summary inline, detail by path), choose cheap tiers for mechanical lanes, write primers, and record durable decisions as proposals. |
agent-debate | a consequential decision has two plausible options | Two opposed reviewers on the same evidence with a round cap stated before launch; the synthesis goes to the human. Never decides truth by vote. |
agent-acceptance-gate | about to commit or push merged lane output, locale variants, catalog entries, or claims about named frontier models (benchmarks, release dates, licenses) | Reconcile results (failures preserved), run the triggered preset, and return immutable PASS, CONDITIONAL PASS, or FAIL evidence. |
Redirect stubs, removed in 0.7.0 (migration 0.6): agent-output-reconciler → agent-acceptance-gate; agent-shared-memory → agent-context-budget; agent-plan-act-reflect → deprecated, its harness loop now lives in agent-context-budget.
Native mode is the default. When every lane runs inside one host session with the user present, the lane table and briefs live in the conversation, the host's own limits and permissions apply, and no plan, packet, or checkpoint is written to .coord/ (only a memory proposal may be). Native lanes maps the roles to Claude Code's Agent, SendMessage, Workflow, and worktree mechanisms.
Harness mode adds the policy and checkpoint contract below when a round spans sessions or tools, runs unattended, must resume after an interruption, needs a signed human gate, or AGENT_COLLAB_POLICY is configured. A configured policy always applies and fails closed when unreadable.
Distribution: agent-collab-harness<br> Import: agent_collab_harness<br> Command: agent-collab
python -m pip install agent-collab-harness
agent-collab policy validate --policy "$AGENT_COLLAB_POLICY" --json
agent-collab checkpoint validate --checkpoint .coord/checkpoint.json --json
agent-collab policy evaluate \
--policy "$AGENT_COLLAB_POLICY" \
--checkpoint .coord/checkpoint.json \
--json
agent-collab checkpoint migrate \
--checkpoint .coord/checkpoint-v1.json \
--policy .coord/policy-v2.json \
--metadata .coord/migration-request.json \
--output .coord/checkpoint-v2.json
agent-collab checkpoint advance \
--checkpoint .coord/checkpoint-v2.json \
--policy .coord/policy-v2.json \
--request-id stable-transition-id \
--expected-sha256 RAW_FILE_SHA256
agent-collab doctor --jsonVersion 0.5 adds opt-in v2 goal slices; installing it does not reinterpret v1 state. checkpoint migrate writes a separate v2 checkpoint and leaves the v1 source untouched. checkpoint advance records an eligible slice transition; stable request IDs are idempotent, while stale file hashes and lock contention fail closed. See the 0.5 migration guide.
Runtime dependencies are standard-library only. Policy files use strict JSON; a .yaml suffix is accepted only when the file content is valid JSON. An unreadable configured policy fails closed.
AGENT_COLLAB_POLICY selects the one machine-readable budget source for the run. The Codex portable adapter points it to ${CODEX_HOME}/portable-harness/policies/agent-budget.yaml; that v1 shape and the public v1 JSON shape are both accepted. Human decisions and overrides are action-hash bound and require an HMAC key supplied by the trusted host through AGENT_COLLAB_HUMAN_KEYS_JSON. The matching key digest must already be pinned in the canonical policy's human_authorization.key_hashes; caller-created keys or checkpoint text alone cannot grant authority. The legacy portable v1 shape normalizes to an empty trust root, so it can evaluate budgets but human records fail closed until the canonical policy is explicitly upgraded.
Plans use four public roles:
primary-agent: owns the plan, checkpoint, and human handoff;delegated-executor: performs a bounded task;reviewer: independently verifies evidence and risks;synthesizer: structures completed inputs without inventing missing work.Provider and model selection belongs to the host adapter. It is not a public plan field and cannot silently change during a run.
.coord/ and .ai/ are ignored scratch by default. Do not commit all coordination output. A project may explicitly promote only:
Memory is proposal-only. Applying, correcting, superseding, archiving, or deleting canonical memory requires a recorded human decision. Canonical memory is an append-only event log; old records are never edited in place.
claude plugin marketplace add WenyuChiou/agent-collab-skills
claude plugin install agent-collab-workspace@agent-collab-skillsOr use scripts/install-all.sh / scripts/install-all.ps1. The plugin and Python package are complementary: skills describe collaboration behavior; the package validates and evaluates the machine-readable contract.
python -m pip install -e .
python -m pytest -q
python scripts/check_skill_contracts.py
agent-collab doctor --jsonSee CONTRIBUTING.md for contract, test, and release rules. Historical provider-specific incidents remain in the failure archive and are not active routing instructions.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.