Install
$ agentstack add skill-sdwolf4103-opencode-agenthub-hr-assembly ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
HR Assembly Protocol
Purpose
Generate a staged package under $HR_HOME/staging// without mutating imported home assets.
Required Package Layout
$HR_HOME/staging//
handoff.json
promotion-memo.md
worker-card.json
agenthub-home/
bundles/
profiles/
souls/ or skills/
mcp/
mcp-servers/
Staging Rules
- For pure-soul agents, stage a soul file plus bundle and profile.
- For mixed soul+skill agents, preserve specialized scope and prefer
subagentmode unless the user explicitly wants otherwise. - For skill assets, stage a skill directory plus a bundle/profile that preserves host selection requirements.
- If a staged bundle references a skill, stage that skill directory under
agenthub-home/skills//unless the package is explicitly documented as depending on a separately imported prerequisite package. - If a staged bundle references an MCP tool, stage the matching
agenthub-home/mcp/.jsonregistration file and the referencedagenthub-home/mcp-servers/implementation files. If the command relies onmcp-servers/node_modules/..., also stagemcp-servers/package.jsonso dependencies can be installed on import/promote. - Do not invent runtime semantics in bundle
metadata. Keys such asoptional_skillsorruntime_conditional_skillsare notes only and are not valid substitutes for staged skills or real platform behavior. - Prefer namespaced bundle/soul/profile names for adapted teams or rewrites so the package does not overwrite shared starter assets like
plan,build, orexploreunless the human explicitly requests replacement. - If a staged profile sets
defaultAgent, it must use the staged bundle'sagent.namevalue, not the bundle filename. This matters when bundle filenames are namespaced butagent.nameis shorter. - Before final assembly, confirm whether the operator wants to keep default opencode agents such as
general,explore,plan, andbuild. If not, the staged profile must set"nativeAgentPolicy": "team-only". This suppresses host native agent merges and emitsdisable: trueoverrides for default opencode agents that are not supplied by the staged team itself. - If
nativeAgentPolicyisteam-onlyand the staged bundle set does not already provideexplore, automatically include the built-in hiddenexploresubagent so the team retains investigation coverage without another user prompt. - Before final assembly, MUST verify the staged bundle set includes at least one
agent.mode: "primary"agent that is not hidden. If all sourced candidates are subagent-style, either add/create a primary host agent or keep native agents visible. Never stage an all-subagent team asteam-only. - If a prior or external flow has set
promotion_preferences.set_default_profile, preserve it inhandoff.json. Do not proactively ask the operator about default-profile preferences during assembly. - If AI models are still unresolved when final assembly begins, stop and confirm the exact model choice here before writing staged agent defaults. Model confirmation must use opencode environment availability probing, not the synced inventory catalog.
- If the operator specifies a model variant such as
xhigh,high, orthinking, store it canonically asagent.model: "provider/model"plusagent.variant: "...". For backward compatibility, combined strings like"provider/model xhigh"may still be accepted on read, but staged output should prefer the split form. - The package must be promotable by:
agenthub promote
- Advanced/manual fallback remains:
agenthub hub-import --source /agenthub-home
- Standard handoff must tell the operator to test the staged team before promote with:
agenthub hr
- That test path must be described as a workspace runtime test that does not modify the operator's personal home.
- Standard handoff must also say that the same staged profile can be used in another workspace before promote by running the same command there.
- Promote must be described as the step that imports the package into the personal home so future bare
agenthub startruns can use it.
Required Handoff Fields
schema_versionpromotion_idworker_idasset_kindagent_classdeployment_roletarget_profileproposed_profilepackage_layout_versionartifactsgenerated_atpromotion_preferencesoperator_instructionshost_requirementswhen MCP tools or other host-side dependencies exist
Required Handoff Structure
operator_instructions must include:
test_current_workspaceuse_in_another_workspacepromoteadvanced_import
If MCP tools are referenced, artifacts must also include:
mcp_configsmcp_servers
If MCP tools are referenced, host_requirements must explicitly state whether MCP servers are bundled and what runtime/environment dependencies remain on the host.
Soul Adaptation Rule
When staging a pure-soul agent, the adapted soul must explicitly list:
- the intended skill set
- the intended tool set
- the agent's boundaries
This prevents vague souls that only describe personality.
Mandatory Validation
Before you present a staged package as ready, run all of the following from the workspace root:
python3 $HR_HOME/bin/vendor_stage_skills.py $HR_HOME/staging/
python3 $HR_HOME/bin/vendor_stage_mcps.py $HR_HOME/staging/
python3 $HR_HOME/bin/validate_staged_package.py $HR_HOME/staging/
If validation fails, the package is not ready.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sdwolf4103
- Source: sdwolf4103/opencode-agenthub
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.