Install
$ agentstack add skill-lomomao-delegate-to-deepseek-harness-delegate-to-deepseek-harness ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Delegate to DeepSeek Harness
Use DeepSeek Harness as a worker. Keep Codex as orchestrator, reviewer, and final authority.
Core rule
Delegate execution, not responsibility. A worker report is a claim, not proof. Review the workspace and independently verify relevant acceptance criteria before reporting success.
Verify the contract, not the whole implementation again. Delegate the work. Verify the evidence. Don't redo the work.
Decide whether to delegate
Delegate when the task is self-contained and at least one of these is true:
- implementation is mechanical, repetitive, or context-heavy;
- the task has clear acceptance criteria and a practical verification path;
- repository exploration can be framed as a concrete question;
- an isolated second implementation or diagnosis would be useful;
- independent tasks can run in separate worktrees.
Keep the task in Codex when it is trivial, primarily architecture/product judgment, dependent on rich unsummarized conversation context, privileged or irreversible, or not independently verifiable.
Choose the worker path
Use this order:
- Harness MCP if a configured server exposes
agent_runand, when needed,task_inbox/task_result. - Headless fallback with
scripts/dsh_headless.shwhen MCP is unavailable anddshexists. - If neither path is available, stop delegation and state the missing prerequisite.
Read references/setup.md only when setup or connectivity matters.
Write the worker brief
Give the worker a self-contained contract:
Objective:
Scope:
Constraints:
Acceptance criteria:
-
-
Verification contract:
- allowed_paths:
- checks:
- invariants:
- limits:
- review_mode: receipt | targeted | full
Verification:
-
Rules:
- Work only inside the supplied cwd.
- Inspect before editing.
- Preserve unrelated changes.
- Do not commit, push, publish, deploy, rotate credentials, or perform destructive external actions.
- If blocked, report the blocker instead of guessing.
Put durable context in MCP context; put the actionable assignment in task. Do not dump the entire host conversation into the worker prompt.
Run the worker
For one bounded task, prefer synchronous agent_run with task, relevant context, and an absolute cwd.
Use queued tools only when multiple independent tasks benefit from overlap. Never run concurrent mutating workers against the same checkout. Use separate worktrees/cwds, then review and integrate in Codex.
For headless fallback, resolve this Skill directory and run:
scripts/dsh_headless.sh "" ""
Review the result
If the MCP returns structured fields, inspect changes, verification, leftovers, and the final assistant text. Inspect tool traces when the summary is unclear.
First run the machine verifier with the contract from the brief:
scripts/verify_workspace.sh --allowed-paths '' --checks '' [--invariants no-new-deps,no-public-api-change,no-untracked] [--max-changed-files N] [--max-diff-lines N]
It returns a small JSON receipt (status, changed files, diff lines, scope check, test results, risk flags). Then review by the contract's review mode:
- receipt (test fixes, mechanical edits, small bugs): contract PASS → report done. Do not read the diff. Do not edit.
- targeted (ordinary features): contract PASS → skim the changed-file summary or named high-risk hunks only. No concrete defect seen → done.
- full (auth, payment, DB migrations, concurrency, security, public API, broad architecture): read the full diff and review risky logic yourself.
Stop rule — the contract is the finish line. If the verification contract passes:
- do not make additional edits;
- do not broaden scope;
- do not refactor for cleanliness;
- do not add defensive handling;
- do not improve unrelated edge cases;
- do not rerun broader tests unless the contract requires them;
- report completion.
Reopen implementation only on a concrete contract failure or a predefined high-risk trigger. Never say tests passed unless Codex observed a reliable test result.
If the worker is blocked or wrong, either fix the issue directly or send one focused follow-up. Avoid open-ended retry loops; after two failed delegated attempts on the same failure mode, take over or report the blocker.
Final response
Keep the user-facing answer about the task, not the plumbing. Distinguish what the worker attempted from what Codex independently verified, and mention any remaining uncertainty.
Read references/delegation-policy.md when routing boundaries are unclear.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: LomoMao
- Source: LomoMao/delegate-to-deepseek-harness
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.