Install
$ agentstack add skill-conn-castle-agent-layer-auto-skill-loop ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
auto-skill-loop
This is a parent orchestrator skill. Do not implement or ship code yourself.
Required inputs
Fail before side effects unless all are present:
worker_skill: exactlyfix-issuesorimprove-codebaseimplementer: dispatch agent roleshipper: dispatch agent rolereview_agents: one or more dispatch agent roles- explicit standing authorization for this orchestrator to merge ready PRs
Dispatch agent roles may be terse (codex xhigh, claude opus high, antigravity). Infer the agent only when unambiguous from the model; otherwise fail. Before dispatching, follow agent-dispatch, inspect live options, and fail if a requested override is unsupported.
Pass review_agents to any delegated skill that uses multi-agent-plan-review.
References
Read the one selected worker skill contract. Do not read both.
fix-issues: [references/fix-issues-loop.md](references/fix-issues-loop.md)improve-codebase: [references/improve-codebase-loop.md](references/improve-codebase-loop.md)
Read [references/blocker-classification.md](references/blocker-classification.md) only when a worker returns a checkpoint or blocker candidate.
Read [references/merge-readiness.md](references/merge-readiness.md) only when a PR exists and is ready for final review or merge.
Ledger
Create .agent-layer/tmp/auto-skill-loop..state.md. Update it before and after dispatches, branch switches, pushes, PR actions, blockers, and merges.
Record current step, branches, PRs, dispatch agent roles, normalized dispatch flags, review agent dispatch roles, merged PRs, blocked branches, blocked PRs, recent touched paths, exhausted lenses, worker questions and answers, user-only blockers, manual gates, PR-gate status, and verification evidence. Record worker deferrals in this ledger or worker artifacts, not as deferral notes in ISSUES.md.
Loop
- Start each fresh attempt from a clean primary branch checkout. Do not stash
or discard work; if leaving an attempt, commit and push its branch first.
- Create or reuse one batch branch for autonomous, non-blocked work.
- Dispatch the implementer with the selected worker skill, the current ledger
context, and the review agents to any delegated multi-agent-plan-review run.
- Answer worker checkpoints as the human proxy when no user-only decision is
required. If user input is required, commit and push the branch, leave any PR open, record the blocker, and checkout the primary branch. Then start a fresh attempt from #1.
- If the PR gate has not been met, go back to #3 and continue on the same
batch branch with the current uncommitted work or local commits. Once the PR gate has been met, continue to #6.
- Use the shipper dispatch agent role for
/ship-prthrough its green,
open-PR endpoint. Do not delegate merge execution.
- Perform final readiness review yourself. If repository policy, PR automation,
or any external gate requires explicit manual approval, leave the PR open, record the gate, and checkout the primary branch. Then continue back at #1 with a fresh attempt.
- Merge ready PRs under this skill's standing authorization.
- Go back to #1 and continue. Stop only when interrupted or no autonomous work
remains. When only a final small autonomous tail remains, ship it even if it misses the normal size gate.
PR gate
Open or ship a PR when at least one is true:
- fixes at least 3 issues
- touches at least 5 meaningful files
- changes at least 500 meaningful lines
- fixes a high-severity security, data-loss, release-blocking, or correctness
issue
- ships the final remaining autonomous work before exhaustion
Generated files, lockfile churn, and mechanical dependency noise do not count unless they are the substance of the work.
Guardrails
- Never close or delete a blocked PR or branch.
- Never weaken checks, tests, or skill definitions to keep the loop moving.
- Never treat low-value churn as progress.
- Keep the checkout clean between attempts.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: conn-castle
- Source: conn-castle/agent-layer
- License: MIT
- Homepage: https://agent-layer.dev/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.