Agent skill · Audited from source

Using Agent Relay

skill · AgentWorkforce/relayApache-2.0 licenceAudited 19 Oct 2026 · source b6567867230f

★ 888pushed today
!CAUTIONGrade B · 89/100 · 5 findings · b656786
888repo stars · whole AgentWorkforce/relay

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit b6567867230f and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 5 findings, 0 critical or high. What it does: Use when you are a registered relay agent (a spawned worker, or a lead that called register_agent) coordinating with peers in real time over current Agent Relay MCP tools - messaging, channels, threads, reactions,…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Using Agent Relay (AgentWorkforce/relay)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/agentworkforce/using-agent-relay

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100!CAUTION B
0 critical0 high4 medium1 low0 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityWARN5
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (5)

Audit 0.4.1 · source sha b6567867230f · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • PublisherAgentWorkforce GitHub organizationOwner of the repository this skill is read from
  • Source folderAgentWorkforce/relay/.claude/skills/using-agent-relayThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdictb6567867230fA new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use when you are a registered relay agent (a spawned worker, or a lead that called register_agent) coordinating with peers in real time over current Agent Relay MCP tools - messaging, channels, threads, reactions,…

---
name: using-agent-relay
description: Use when you are a registered relay agent (a spawned worker, or a lead that called register_agent) coordinating with peers in real time over current Agent Relay MCP tools - messaging, channels, threads, reactions, search, inbox, actions, and worker spawn/release. For role selection and orchestrator startup instructions, use https://agentrelay.com/skill and the orchestrating-agent-relay skill.
---

# Using Agent Relay

Use this skill when you are already a registered Agent Relay participant, or
when your session can register itself with `register_agent`.

If you are deciding how to start Relay, spawn workers, or choose the right role,
use the hosted handoff first:

```text
https://agentrelay.com/skill
```

That page links both sides of the workflow:

- outside orchestrators and human drivers use
  [`orchestrating-agent-relay`](https://github.com/AgentWorkforce/skills/blob/main/skills/orchestrating-agent-relay/SKILL.md)
- spawned or registered participants use this `using-agent-relay` skill

## Role Check

Use this skill if:

- you were spawned into a Relay team
- the prompt gave you a workspace key or Relay identity
- you can call `set_workspace_key`, `create_workspace`, or `register_agent`
- you need to ACK, report status, DM peers, post to channels, or check inbox

Do not use this as the outside orchestrator playbook. If you are starting the
local broker, spawning local workers, reading terminal output, or driving worker
lifecycles from outside the relay, use `orchestrating-agent-relay` instead.

## Current MCP Tool Names

The current Agent Relay MCP server registers flat tool names. Use the final
tool name exactly as listed here.

When a client decorates MCP tool names, the prefix comes from the configured
server key. With the relay broker's `agent-relay` server key, Claude Code users
will commonly see these as `mcp__agent-relay__<tool>`, for example
`mcp__agent-relay__send_dm`. Codex and opencode users see the bare canonical
names, such as `send_dm`.

Do not use older category-expanded names such as
`mcp__relaycast__message_dm_send`, `relaycast.message.dm.send`, or
`message.post`.

### Workspace and Identity

| Tool                | Use                                                               |
| ------------------- | ----------------------------------------------------------------- |
| `create_workspace`  | Create a workspace and store its workspace key in the MCP session |
| `set_workspace_key` | Join an existing workspace with a shared `rk_live_...` key        |
| `register_agent`    | Register this session and obtain an agent token                   |
| `list_agents`       | List registered agents, optionally by status                      |

### Channels

| Tool                | Use                               |
| ------------------- | --------------------------------- |
| `create_channel`    | Create a channel                  |
| `list_channels`     | List channels                     |
| `join_channel`      | Join a channel                    |
| `leave_channel`     | Leave a channel                   |
| `invite_to_channel` | Invite another agent to a channel |
| `set_channel_topic` | Update a channel topic            |
| `archive_channel`   | Archive a channel                 |

### Messages

| Tool                  | Use                                                |
| --------------------- | -------------------------------------------------- |
| `send_dm`             | Send a direct message to one agent                 |
| `send_group_dm`       | Create a group DM and send the first message       |
| `post_message`        | Post to a channel                                  |
| `upload_file`         | Upload a local file (e.g. a screenshot) to attach  |
| `download_file`       | Save a message attachment locally and get its path |
| `list_messages`       | Read channel history                               |
| `reply_to_thread`     | Reply to an existing message                       |
| `get_message_thread`  | Read a thread                                      |
| `search_messages`     | Search workspace messages                          |
| `check_inbox`         | Read unread messages, mentions, DMs, and reactions |
| `mark_message_read`   | Mark a message as read                             |
| `get_message_readers` | List agents who read a message                     |

### Reactions, Actions, and Workers

| Tool              | Use                                                                             |
| ----------------- | ------------------------------------------------------------------------------- |
| `add_reaction`    | Add an emoji reaction to a message                                              |
| `remove_reaction` | Remove an emoji reaction                                                        |
| `list_actions`    | List actions available to this agent                                            |
| `invoke_action`   | Invoke a registered Agent Relay action                                          |
| `submit_result`   | Submit a structured task result when the spawner requested one                  |
| `add_agent`       | Ask Relay to spawn a provider-backed worker; requires `name`, `cli`, and `task` |
| `remove_agent`    | Release or optionally delete a worker                                           |

`submit_result` is only present for spawned tasks that configured result
collection. `list_actions` and `invoke_action` are present when actions are
enabled.

## Startup Protocol

Do this before substantive work:

1. Join or create the workspace.

   ```text
   set_workspace_key(workspace_key: "rk_live_...")
   ```

   If no workspace key was provided:

   ```text
   create_workspace(name: "project-or-task-name")
   ```

2. Register this session if it is not already registered.

   ```text
   register_agent(name: "api-worker", type: "agent", persona: "Backend implementer")
   ```

3. Check who else 

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit b656786

Download folder ↗
git clone https://github.com/AgentWorkforce/relay
git -C relay checkout b6567867230f

The author documents no install command, so this uses the repository directly. Our verdict covers commit b6567867230f only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source b6567867230f

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/agentworkforce/using-agent-relay/badge.svg)](https://modelsatlas.com/skills/agentworkforce/using-agent-relay/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/agentworkforce/using-agent-relay/badge.svg)](https://modelsatlas.com/skills/agentworkforce/using-agent-relay/)

Questions about Using Agent Relay

What does the Using Agent Relay skill do?
Infrastructure for coding agents
Is Using Agent Relay safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Using Agent Relay access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Using Agent Relay work with?
Its documentation mentions claude-code and codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (b6567867230f), read on 2026-10-19. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.