Install
$ agentstack add skill-allemaar-open-skills-multi-agent-mode ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
/multi-agent-mode
Switch the current session into assisted multi-agent behavior. The lead agent remains responsible for planning, direct execution, integration, and final verification, but should actively look for independent slices that helper agents can handle in parallel or in the background.
Activation announcement
When invoked, immediately announce:
> Multi-agent mode active. > > I will continue working directly, and I may delegate independent helper slices when that improves speed, quality, or context control. I will keep ownership boundaries explicit, inspect helper outputs, and own final integration. Max 3 helpers without confirmation; no recursive subagents.
Then continue with the user's work item if provided.
Mode switching
- This is a persistent session mode until the user exits it, restarts the session, or explicitly switches to another mode.
- If the user invokes
orchestrate-mode, announce the switch: the lead agent is now dispatch-only and must not execute concrete work directly. - If the user exits multi-agent mode without choosing another mode, return to normal single-agent behavior.
- Latest explicit mode wins. Do not maintain a hidden mode stack.
Core behavior
The lead agent should do the first decomposition pass locally:
- Identify the immediate critical-path work the lead should do directly.
- Identify independent helper slices that do not block the next lead action.
- Delegate only slices with clear ownership and acceptance criteria.
- Resolve whether helpers have isolated workspaces or share the lead's filesystem. Keep working locally only on work that cannot collide with their reads, writes, branch selection, staging, or cleanup.
- Inspect helper outputs before integrating or relying on them.
- Run or request final verification for the integrated result.
When to delegate
Delegate when a slice is independent and materially useful, such as:
- Separate failing test files or unrelated failures.
- Independent subsystem investigations.
- Bounded implementation work in disjoint files.
- A focused review or research question that can run while the lead continues.
- UI, backend, docs, or migration slices with clear non-overlapping ownership.
Do not delegate when:
- The task is small enough that delegation overhead exceeds benefit.
- The root cause is likely shared across all failures.
- The work needs one coherent global design decision first.
- Helpers would edit the same files or tightly coupled files.
- The helper brief would be longer or harder than the task.
Guardrails
- MUST keep the lead agent responsible for final outcome, integration, and verification.
- MUST give each helper a self-contained brief: goal, scope, owned files, non-goals, context, acceptance criteria, verification, and expected report.
- MUST tell helpers they are not alone in the codebase and must not revert or overwrite others' changes.
- MUST keep helper ownership disjoint.
- MUST resolve and state the runtime's actual workspace boundary before code-changing delegation. A worker tool or vendor name is not proof of isolation.
- MUST, when helpers share a filesystem or working tree, restrict parallel code changes to disjoint paths with explicit shared-state coordination; otherwise serialize them. Branch switches, staging, commits, generated files, and cleanup are shared mutations even when source-file pens differ.
- MUST inspect helper output, diffs, or changed paths before accepting.
- MUST NOT spawn more than 3 helpers without explicit user confirmation.
- MUST NOT recurse beyond depth 1. Helpers must not spawn their own helpers.
- MUST NOT delegate urgent blocking work when the lead's next action depends on the answer.
Helper prompt baseline
You are a helper agent in multi-agent mode. The lead agent is also working. Stay within your assigned scope and do not revert or overwrite changes from others.
Goal:
Scope / owned files:
Do not touch:
Relevant context:
Acceptance criteria:
Verification to run:
Final report must include: changed paths, commands run, result, unresolved risks.
Relationship to other skills
- Use
orchestrate-modewhen the lead agent should stop executing and only coordinate. - Use
cold-reviewwhen the goal is independent outside review of work artifacts. - Use
verifyfor a formal self-gate against intent, plan, and execution artifacts. - Use
double-checkfor same-agent adversarial re-reading of a specific target.
> Human output. This skill's handler-facing output obeys the human-output > contract (human-output/SKILL.md).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: allemaar
- Source: allemaar/open-skills
- License: Apache-2.0
- Homepage: https://allemaar.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.