AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Delegate To Worker Models

skill-ariaxhan-the-agent-library-delegate-to-worker-models · by ariaxhan

>-

No reviews yet
0 installs
17 views
0.0% view→install

Install

$ agentstack add skill-ariaxhan-the-agent-library-delegate-to-worker-models

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-ariaxhan-the-agent-library-delegate-to-worker-models)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
29d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Delegate To Worker Models? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Delegate to Worker Models

Cheap models are not junior engineers; they are excellent typists. Observed across production agent runs, small models are reliable in exactly two roles: total-spec execution (every decision already made, written down, and verified) and mechanical, evidence-only verification (run these commands, report the raw output). Everywhere they were handed a decision, they drifted: inventing spec where the prompt was silent, or dying on a trap the coordinator knew about but did not restate. The wins are a decomposition achievement, not a model achievement: the coordinator pre-deciding everything is what makes cheap models safe.

The two safe jobs, and the tell

  • Total-spec execution: the lane implements a written guide with zero open questions.
  • Evidence-only verification: the lane runs named checks and returns raw output, never

a judgment.

The tell: if the prompt needs the phrase "use your judgment" anywhere, it is a strong-model task. Do not lengthen the prompt to compensate; change the model or make the decision yourself first.

The pre-verified guide (a lane is only as safe as its guide)

Before delegating anything non-mechanical, write a guide the lane executes. Every API signature in it is grepped from the installed package source (the type declarations on disk) the day the guide is written, never recalled from memory: recall is the hallucination risk, in the guide author as much as in the lane. Name the repo conventions with a concrete file to copy from. A lane without a guide is a coin flip; a lane with one lands green.

The lane contract (every section is load-bearing)

  1. One deliverable, named. Never two features.
  2. Read-first list, ordered. The guide, then the 2 to 4 existing files whose patterns

get copied, by exact path. State that the guide wins every conflict.

  1. Files table. CREATE vs MODIFY, exact paths. A lane that invents a path is off-contract.
  2. Known traps, restated. Even if they are documented elsewhere. Lanes have died on

traps that were written down one file away. Repetition is cheap; rediscovery is not.

  1. Verification loop with exact commands and expected counts ("111 existing plus your

12 new"). "Iterate until green", never "run the tests".

  1. Forbidden list. No commits (the coordinator commits), no dependency or lockfile or

config changes, no files outside the table, explicit limits on sensitive scopes.

  1. Return format: raw data. Files with line counts, test-output tails, deviations with

one-line reasons, and "what the coordinator should adversarially probe". Never accept narrative alone.

Coordinator duties after a lane returns

  • Re-run the gate yourself. The lane's output is a claim, not evidence. Across

production runs, lane reports are wrong or importantly incomplete roughly 1 in 5 times.

  • Diff-read the actual changes and check the forbidden list held: no stray files, no

touched dependencies or contracts.

  • Commit yourself, with a conventional message. Lanes never commit.

When a lane fails or is cancelled

Harvest before disposal: extract the trap that killed it into the guide, archive the tree if you want the reference, then reimplement fresh from the improved guide. Never merge the corpse because most of it passed; the guide is now worth more than the code, and fresh execution from it is faster than debugging a half-dead branch.

Anti-patterns

  • Delegating a decision to a cheap model. It will make one, silently, and the spec drifts.
  • A guide written from memory. Grep the installed source; recalled signatures are the bug.
  • Trusting "all tests pass" from a lane. Counts from your own shell only.
  • Omitting a trap because "it's in the docs". Restate it in the contract.
  • Merging a cancelled lane's branch to save time. Harvest the trap, reimplement fresh.

Output

Return, per delegation: the model tier with the reason (which of the two safe jobs it is), the guide path, the full lane contract, and after return: the coordinator's own gate run, the diff-read result, and the commit.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.