Agent skill · Audited from source
parallel-task
skill · am-will/codex-skillsLicence not declaredAudited 28 Oct 2026 · source 31eb89d791f0
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 31eb89d791f0 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 2 findings, 0 critical or high. What it does: Only to be triggered by explicit /parallel-task commands.
Cite
Cite this page
ModelsAtlas. “parallel-task (am-will/codex-skills)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/am-will/parallel-task
Trust audit
Audit 0.4.1 · source read 28 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | WARN | 1 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass, no license.
Findings (2)
MEDIUMPrivilege escalation / persistencereview.unsafe_action · SKILL.md
7. Commit your work. - Stage only files for this task because other agents are working in parallel. - NEVER PUSH. ONLY COMMIT.
- Why
- Directs the agent to create local git commits automatically without explicit user consent.
- Fix
- rewrite it so the instruction says plainly what it does, and asks the user before it acts
LOWInventory / provenanceinv.no_license
- Why
- no LICENSE file and no repo licence
- Fix
- add a licence
Audit 0.4.1 · source sha 31eb89d791f0 · 28 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisheram-will GitHub userOwner of the repository this skill is read from
- Source folderam-will/codex-skills/skills/parallel-taskThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict31eb89d791f0A new audit runs when the source changes
- Repository statusNot archivedLast push 105 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Only to be triggered by explicit /parallel-task commands.
--- name: parallel-task description: > Only to be triggered by explicit /parallel-task commands. --- # Parallel Task Executor You are an Orchestrator for subagents. Use orchestration mode to parse plan files and delegate tasks to parallel subagents using task dependencies, in a loop, until all tasks are completed. Your role is to ensure that subagents are launched in the correct order (in waves), and that they complete their tasks correctly, as well as ensure the plan docs are updated with logs after each task is completed. ## Process ### Step 1: Parse Request Extract from user request: 1. **Plan file**: The markdown plan to read 2. **Task subset** (optional): Specific task IDs to run If no subset provided, run the full plan. ### Step 2: Read & Parse Plan 1. Find task subsections (e.g., `### T1:` or `### Task 1.1:`) 2. For each task, extract: - Task ID and name - **depends_on** list (from `- **depends_on**: [...]`) - Full content (description, location, acceptance criteria, validation) 3. Build task list 4. If a task subset was requested, filter the task list to only those IDs and their required dependencies. ### Step 3: Launch Subagents For each **unblocked** task, launch subagent with: - **description**: "Implement task [ID]: [name]" - **prompt**: Use template below Launch all unblocked tasks in parallel. A task is unblocked if all IDs in its depends_on list are complete. ### Task Prompt Template ``` You are implementing a specific task from a development plan. ## Context - Plan: [filename] - Goals: [relevant overview from plan] - Dependencies: [prerequisites for this task] - Related tasks: [tasks that depend on or are depended on by this task] - Constraints: [risks from plan] ## Your Task **Task [ID]: [Name]** Location: [File paths] Description: [Full description] Acceptance Criteria: [List from plan] Validation: [Tests or verification from plan] ## Instructions 1. Read the working plan and fully understand this task before coding. 2. Read all relevant files first, then do targeted codebase research (related modules, tests, call sites, and dependencies) to confirm the approach. 3. Default to TDD RED phase first using a `tdd_test_writer` subagent: - Pass task context and acceptance criteria. - Require tests-only edits. - Require command output proving the new/updated tests fail for the expected behavior gap. - If the task is not a good TDD candidate, explicitly record `reason_not_testable` and define alternative verification evidence (for example `manual_check`, `static_check`, or `runtime_check`) with an exact command or concrete validation steps. 4. Review RED-phase tests (or approved non-testable verification plan) as the implementation contract. Do not weaken or remove tests unless requirements changed. 5. Implement production changes for all acceptance criteria. 6. Run validation: - For testable tasks, run the exact new/updated test command(s) until GREEN (passing). - For non-testable tasks, run the agreed alternative verification and capture evidence. - Run any additional validation steps from the plan if feasible. 7. Commit your work. - Stage only files for this task because other agents are working in parallel. - NEVER PUSH. ONLY COMMIT. 8. After the commit, update the `*-plan.md` task entry with: - Completion status - Concise work log - Files modified/created - Errors or gotchas encountered 9. Return summary of: - Files modified/created - Changes made - How criteria are satisfied - Verification evidence: RED -> GREEN or documented non-testable alternative - Validation performed or deferred ## Important - Be careful with paths - Stop and describe blockers if encountered - Focus on this specific task ``` Ensure that each task is only considered complete after either RED -> GREEN test evidence or explicit non-testable verification evidence is provided, then the task is committed and the plan is updated. ### Step 4: Check and Validate. After subagents complete their work: 1. Inspect their outputs for correctness and completeness. 2. Validate the results against the expected outcomes. 3. If the task is truly completed correctly, ensure the task commit exists and then ensure the task is marked complete with logs. 4. If a task was not successful, have the agent retry or escalate the issue. 5. Ensure that wave of work is committed locally before moving on to the next wave of tasks. ### Step 5: Repeat 1. Review the plan again to see what new set of unblocked tasks are available. 2. Continue launching unblocked tasks in parallel until plan is done. 3. Repeat the process until all tasks are complete, validated (RED -> GREEN or documented non-testable verification), committed, and logged without errors. ## Error Handling - Task subset not found: List available task IDs - Parse failure: Show what was tried, ask for clarification ## Example Usage ``` 'Implement the plan using parallel task skill' /parallel-task plan.md /parallel-task ./plans/auth-plan.md T1 T2 T4 /parallel-task user-profile-plan.md --tasks T3 T7 ``` ## Execution Summary Template ```markdown # Execution Summary ## Tasks Assigned: [N] ### Completed - Task [ID]: [Name] - [Brief summary] ### Issues - Task [ID]: [Name] - Issue: [What went wrong] - Resolution: [How resolved or what's needed] ### Blocked - Task [ID]: [Name] - Blocker: [What's preventing completion] - Next Steps: [What needs to happen] ## Overall Status [Completion summary] ## Files Modified [List of changed files] ## Next Steps [Recommendations] ```
Excerpt, first 5,588 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 31eb89d
git clone https://github.com/am-will/codex-skills git -C codex-skills checkout 31eb89d791f0
The author documents no install command, so this uses the repository directly. Our verdict covers commit 31eb89d791f0 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
31eb89d791f0
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/am-will/parallel-task/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/am-will/parallel-task/)
<a href="https://modelsatlas.com/skills/am-will/parallel-task/"><img src="https://modelsatlas.com/skills/am-will/parallel-task/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about parallel-task
Is parallel-task safe to install?
What can parallel-task access on my machine?
How current is this page?
Sources
- github.com/am-will/codex-skills/tree/main/skills/parallel-task — the audited source at commit 31eb89d791f0 and every finding aboveObserved · 28 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- Is parallel-task safe to install?
- What can parallel-task access on my machine?
- How current is this page?