Install
$ agentstack add skill-sdwolf4103-opencode-agenthub-hr-final-check ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
HR Final Check Protocol
Purpose
Verify that a staged package is understandable and safe before the human operator approves it.
Required Checklist Sections
- package completeness
- provenance completeness
- bundle/profile coherence
- soul clarity
- skill clarity
- MCP completeness and host-runtime clarity
- deployment role correctness
- unresolved risks / open decisions
- import-root and assemble-only validation
- runtime configuration confirmation
- protocol-compliance checkpoints
Clarity Definitions
Subagent description clear
All of the following must be true:
- the description states what the subagent does
- the description states its scope or boundary
- the description does not overlap ambiguously with another staged subagent
Skill description clear
All of the following must be true:
- the description states when to use the skill
- the description states what procedure it performs
- the description states what output or result the user/operator should expect
Final Output
Write final-checklist.md and end with a human-facing status:
READY FOR HUMAN CONFIRMATIONREADY WITH CAVEATSNOT READY
Compact Checklist Shape
Keep final-checklist.md compact and explicit. Use this shape:
## Final Checklist -
| Check | Result |
|---|---|
| import root is agenthub-home/ | pass/fail |
| no unsupported concepts | pass/fail |
| soul skill/tool sets declared | pass/fail |
| descriptions are operator-readable | pass/fail |
| MCP registrations resolve to staged servers or blocker | pass/fail |
| handoff clearly separates test/use/promote | pass/fail |
| model preferences were confirmed before assembly | pass/fail |
| final names were user-confirmed | pass/fail |
| specialized work was delegated | pass/fail |
| staged model ids confirmed via opencode environment | pass/fail |
| profile defaultAgent matches bundle agent.name | pass/fail |
| team includes at least one primary, non-hidden agent | pass/fail |
| default opencode agent policy confirmed | pass/fail |
| default-profile preference recorded if present | pass/fail |
| no host project mutations | pass/fail |
overall: READY FOR HUMAN CONFIRMATION | READY WITH CAVEATS | NOT READY
blocker:
Hard Validation Rule
The package cannot be marked ready unless the verifier confirms:
- the handoff shows: (a) staging path, (b) test command
agenthub hr, (c) promote commandagenthub promote - the manual import fallback points to
/agenthub-homeand is described as advanced/manual only - all referenced skills either exist inside the staged
skills/directory or are explicitly rejected as missing blockers python3 $HR_HOME/bin/validate_staged_package.py $HR_HOME/staging/passes- the package explicitly records whether default opencode agents are kept or hidden, and if
promotion_preferences.set_default_profileis present, it is consistent - staged model ids are either confirmed available in the opencode environment or are called out as blockers/caveats for human review
- if any bundle references MCP tools, the staged package includes the referenced
mcp/*.jsonfiles, the requiredmcp-servers/implementation files, andmcp-servers/package.jsonwhen runtime dependencies are needed - the handoff clearly shows how to test/use the staged profile in a workspace before promote, and promote is not described as mandatory for workspace use
- if a profile sets
defaultAgent, that value exactly matches one of the staged bundles'agent.namevalues (not just the bundle filename) - the staged team includes at least one non-hidden primary agent, and any
team-onlyprofile keeps at least one such primary agent available to the operator
If bundle metadata contains fake runtime keys such as optional_skills or runtime_conditional_skills, mark the package NOT READY until they are removed or rewritten as plain documentation outside runtime bundle semantics.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sdwolf4103
- Source: sdwolf4103/opencode-agenthub
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.