Install
$ agentstack add skill-vincentchuwaichow-vanguard-frontier-agentic-model-registry-refresh ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Model Registry Refresh
Doctrine
catalog/model-registry.json is the single source of truth scripts/model-policy.mjs fails closed against. Every model name and reasoning-effort value it accepts must trace to official documentation with a citation — never to memory, never to a plausible-sounding guess at a slug. This skill is the repeatable workflow for keeping that registry accurate without letting research cost dominate the orchestrator's context.
When to run
npm run model-policy:checkfails with an error naming a model "not in the verified model
registry" — the registry is missing a model the policy (or an operator) wants to use.
- A provider (OpenAI, Anthropic, Cursor) ships new models or retires old ones and the catalog
needs to reflect current reality.
- Quarterly staleness check —
last_refreshedincatalog/model-registry.jsonis more than
~3 months old.
Step 1 — delegate research to Haiku Explore agents
Fan out one Haiku Explore agent per harness (or per namespace, for codex) using the Context7 MCP tools (mcp__Context7__resolve-library-id then mcp__Context7__query-docs) plus official docs URLs already cited in the registry. Each research task must:
- Ask for exact slugs/IDs, not families —
gpt-5.5not "the gpt-5 line". - Ask for reasoning-effort support per model, not per harness — some models in a family
predate newer effort levels (see o1/o3/o4-mini lacking none/minimal/xhigh in the current registry).
- Ask for failure-mode evidence — what error shape a bad model name or unsupported effort
actually produces (HTTP status, error code/type), so docs/model-policy-matrix.md's failure table stays accurate.
- Require a source citation per claim — a Context7 library ID + section, or an official docs
URL. A finding without one is not actionable.
- Require an explicit
UNVERIFIEDflag on anything the agent could not confirm from a primary
source (e.g. inferred from a changelog mention, or contradicted between two docs). Do not let an agent silently round an uncertain claim into a confident one.
Example prompt template (adapt per harness/namespace):
Research current [codex OpenAI models | codex Ollama routing | codex OpenRouter routing |
claude-code subagent model/effort fields | cursor subagent model field] using Context7
(resolve-library-id then query-docs) and official docs. Report, for each model/field:
exact slug or ID, supported reasoning-effort values (if any), and the error shape observed
or documented for an invalid value (HTTP status + error code/type). Cite the Context7 library
ID + section or the exact docs URL for every claim. If you cannot confirm a claim from a
primary source, prefix it UNVERIFIED and say why. Do not guess slugs from training data.
Run these Explore agents in parallel; each is scoped to one harness or namespace so the citations stay traceable to a narrow question.
Step 2 — orchestrator updates the registry
The orchestrator, not a delegate, edits catalog/model-registry.json:
- Add new models with
last_verified(today's date) and asourcewhere the schema allows it;
update the relevant namespace's sources array if a new canonical URL was used.
- Bump the registry-level
last_refresheddate. - Never remove a model still referenced by
catalog/model-policy.jsonwithout first
migrating the policy rule(s) that reference it to a replacement model — check with npm run model-policy:report before deleting anything.
- Treat every
UNVERIFIED-flagged finding from Step 1 as a blocker, not a data point to
merge as-is — either verify it directly or leave the registry unchanged for that item.
- Validate the edit against
schemas/model-registry.schema.jsonstructurally (required fields,
anchored match patterns, last_verified date format) before moving on.
Step 3 — sync the human-readable matrix
Delegate to a Sonnet writer subagent to update docs/model-policy-matrix.md so its tables match the registry exactly (namespace tables, verified-model tables, failure modes, enforcement boundaries). Give the delegate the exact diff you made to catalog/model-registry.json in Step 2 and instruct it to touch only docs/model-policy-matrix.md — no other file, no commits.
Step 4 — verify
Run in order, orchestrator-owned:
npm run model-policy:check # registry schema + policy resolves against it
npm run validate # full gate suite
npm run asset-integrity:write # LAST — after every other write has settled
The orchestrator reviews the full diff (registry, matrix doc, any touched harness projections) and is the only one who commits. A delegate's self-report that research or writing is "done" is not verification — read the diff and run the gates yourself before accepting.
Delegation defaults
- Haiku — research only (Step 1): Context7 lookups, docs reading, citation gathering. Never
writes to catalog/model-registry.json or any tracked file.
- Sonnet — writing only (Step 3): syncing
docs/model-policy-matrix.mdprose/tables to a
registry diff the orchestrator already made. Never edits catalog/model-registry.json itself.
- Orchestrator — owns
catalog/model-registry.jsonedits, schema/gate verification, and the
commit. This is the same split .claude/skills/agentic-delegation/SKILL.md codifies more generally: cheap parallel research to Haiku, bulk writing to Sonnet, judgment and commits stay with the orchestrator.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: VincentChuWaiChow
- Source: VincentChuWaiChow/vanguard-frontier-agentic
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.