Install
$ agentstack add mcp-dehor-labs-agent-capability-router ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Agent Capability Router
[](#install) [](LICENSE) [](references/runtime-adapters.md)
Stop making the agent guess which lever to pull.
agent-capability-router is a skill for Codex and Claude Code that routes a task into the right execution surface: local tools, plugins/connectors, skills, subagents, browser/docs lookup, completion goals, automations, hooks, memory capture, or verification.
It is not a permission slip. It is a routing layer: name the capability, name the cost, ask for approval when the move is broad or persistent, then prove the route worked.
What It Helps With
Users usually ask in problem language:
- "Use your team to audit this."
- "Open localhost and check the UI."
- "Which plugin should handle this?"
- "Keep going until tests pass."
- "Remember this workflow."
- "Make sure this is safe before merge."
The router turns those signals into a concrete route, a cost/risk boundary, and a proof plan.
It stays quiet on small work. One file, one command, one obvious fix: just do the work. The router wakes up when the task shape suggests a better path.
Runtime Compatibility
| Capability | Codex | Claude Code | Notes | |---|---|---|---| | Skill discovery | ~/.codex/skills/agent-capability-router | ~/.claude/skills/agent-capability-router | Same SKILL.md and references | | Local tools | Shell, git, project CLIs | Shell, git, project CLIs | Prefer local proof for workspace facts | | Plugins/connectors | Available MCP/app tools | Available MCP/app tools | Authenticated reads/writes are approval-gated | | Subagents/workflows | Runtime-specific subagents/tools | Runtime-specific task/workflow tools | Use only when width or independent review pays off | | Browser/docs/research | Runtime browser/docs/web tools | Runtime browser/docs/web tools | Use for rendered proof or current external facts | | Automations/hooks/goals | Only when exposed by runtime | Only when exposed by runtime | Fallback is a checklist or proposed command |
Requirements
bashor compatible shellpython3for validation and route preview scripts- write access to the target skills directory if installing:
- Codex:
~/.codex/skills - Claude Code:
~/.claude/skills - explicit
--confirmfor any installer write
Install
Clone the public repo:
git clone https://github.com/DeHor-Labs/agent-capability-router.git
cd agent-capability-router
Preview an install without writing:
./scripts/install-skill.sh --runtime both --dry-run
Install into both Codex and Claude Code:
./scripts/install-skill.sh --runtime both --mode copy --confirm
Install only for Codex:
./scripts/install-skill.sh --runtime codex --confirm
Install only for Claude Code:
./scripts/install-skill.sh --runtime claude --confirm
Replace an existing install safely:
./scripts/install-skill.sh --runtime both --mode copy --replace --confirm
Existing installs are backed up under .agent-capability-router-backups before replacement.
For local development, use a symlink:
./scripts/install-skill.sh --runtime both --mode symlink --dev-symlink --confirm
Use --home /path/to/home when testing installs in temporary directories or CI.
Direct Clone Install
The repository root is the skill folder, so direct clone install also works:
git clone https://github.com/DeHor-Labs/agent-capability-router.git ~/.codex/skills/agent-capability-router
git clone https://github.com/DeHor-Labs/agent-capability-router.git ~/.claude/skills/agent-capability-router
The script-based install is preferred for updates because it copies only the skill payload and avoids repository-only test files.
Validate
Run the local checks:
./scripts/validate-skill.py
./scripts/check-agent-neutrality.py
python3 -m unittest discover -s tests
For Codex skill packaging validation:
python3 /path/to/skill-creator/scripts/quick_validate.py .
Post-install spot check:
test -f ~/.codex/skills/agent-capability-router/SKILL.md
test -f ~/.claude/skills/agent-capability-router/SKILL.md
Quick Examples
Route a broad audit into orchestration plus verification:
./scripts/route-task.py "Audit all API routes with your team and verify CI findings"
Expected route: orchestration. Approval required because it may spend subagent/workflow budget.
Route an authenticated service question into plugin selection:
./scripts/route-task.py "Which plugin should check the GitHub deployment status?"
Expected route: tool-plugin-skill-routing, with risk_class set to authenticated_read.
Route a future obligation into recurring work:
./scripts/route-task.py "Schedule a weekly check of release readiness"
Expected route: recurring-work. Approval required because it is persistent automation.
The Core Contract
Route: the smallest useful capability.
Cost: what it spends or risks.
Approval: what needs explicit consent.
Proof: what evidence closes the loop.
That contract matters because agent work fails in two boring ways:
- underpowered: one agent grinds through work that should have been split, verified, or routed through a real service tool
- overpowered: a simple local task becomes a noisy proposal, a needless browser session, or a pile of subagents
This skill tries to stay in the middle: enough leverage to matter, enough restraint to remain useful.
Files In This Skill
agent-capability-router/
SKILL.md
agents/openai.yaml
references/
scripts/
tests/
SKILL.md stays small and routes to focused reference files only when needed.
Safety Notes
- Start with
--dry-runbefore installing. - Installer writes require
--confirm. - Existing installs require
--replacebefore backup and replacement. - Symlink installs require
--dev-symlinkand are intended for local development. - The router does not invent runtime tools. If a capability is unavailable, it should propose a safe fallback.
- Sensitive or authenticated contexts should bias toward local/read-only checks unless explicitly approved.
Troubleshooting
--runtime is required: Pass --runtime codex, --runtime claude, or --runtime both.
Refusing to write without --confirm: Run with --dry-run first, then add --confirm when the target path is correct.
Existing install found: Re-run with --replace --confirm to back up and replace the existing install.
route-task.py returns no route: That is usually correct for simple tasks. The skill should stay quiet unless there are strong routing signals.
License
MIT
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: DeHor-Labs
- Source: DeHor-Labs/agent-capability-router
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.