Agent skill · Audited from source

Subagent Driven Development

skill · GanyuanRan/AegisMIT licenceAudited 18 Oct 2026 · source 177240a262fe

★ 1,357pushed today
✓SAFEGrade B · 89/100 · 18 Oct 2026 · 177240a
1,357repo stars · whole GanyuanRan/Aegis

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 177240a262fe and found no filesystem, network or shell access and no hard-coded secrets. What it does: Use when executing a written implementation plan with independent tasks in the current session where delegation beats inline coordination cost; otherwise inline. Ad-hoc 2+ tasks without a plan use…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Subagent Driven Development (GanyuanRan/Aegis)”. Retrieved 18 Oct 2026. https://modelsatlas.com/skills/ganyuanran/subagent-driven-development

7 skills are called “Subagent Driven Development”. You are viewing GanyuanRan/Aegis.

and 2 more with this name.

Trust audit

Audit 0.4.1 · source read 18 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 177240a262fe · 18 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • PublisherGanyuanRan GitHub userOwner of the repository this skill is read from
  • Source folderGanyuanRan/Aegis/skills/subagent-driven-developmentThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict177240a262feA new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use when executing a written implementation plan with independent tasks in the current session where delegation beats inline coordination cost; otherwise inline. Ad-hoc 2+ tasks without a plan use…

---
name: subagent-driven-development
description: "Use when executing a written implementation plan with independent tasks in the current session where delegation beats inline coordination cost; otherwise inline. Ad-hoc 2+ tasks without a plan use dispatching-parallel-agents."
---

# Execute

→ Have an implementation plan with independent tasks? → **Fresh subagent per task + two-stage review.**
  1. Read plan, extract all tasks, create TodoWrite
  2. Per task: dispatch implementer → answer questions → implementer completes
  3. Review stage 1 (spec compliance) → fix gaps → re-review until ✅
  4. Review stage 2 (code quality) → fix issues → re-review until ✅
  5. Coordinator verifies, commits the coherent task, updates checkpoint/drift → next task
→ All tasks done: final review → verification receipt; branch finishing only when needed.

# Subagent-Driven Development

Execute plan by dispatching fresh subagent per task, with two-stage review after each: spec compliance review first, then code quality review.

**Why subagents:** You delegate tasks to specialized agents with isolated context. By precisely crafting their instructions and context, you ensure they stay focused and succeed at their task. They should never inherit your session's context or history — you construct exactly what they need. This also preserves your own context for coordination work.

**Core principle:** Fresh subagent per task + two-stage review (spec then quality) = high quality, fast iteration

## When to Use

Use when you have a written implementation plan with mostly independent tasks and want to stay in the current session. For cross-session execution, use executing-plans instead.

## The Process

1. Read plan, extract all tasks with full text, create TodoWrite
2. Per task: dispatch implementer with task text + baseline refs + checkpoint + non-goals
3. Implementer completes → dispatch spec compliance reviewer → fix gaps → re-review until ✅
4. Dispatch code quality reviewer → fix issues → re-review until ✅
5. Coordinator runs fresh verification, stages only task-owned paths, commits the
   coherent task, reads back Git state, updates checkpoint/drift → next task
6. All tasks done → final code reviewer → completion verification; use branch
   finishing only for a task-created branch/worktree or requested integration

Before the first repo write, the coordinating agent records
`TaskStartSnapshot`. Same-task agents share the current workspace. The
coordinator is the only default Git mutation owner for staging, commits,
branches, and worktrees; implementers and reviewers edit/verify/report but do
not mutate Git lifecycle state. Task complexity, TDD, planning, subagents, or a
`main`/`master` name does not justify isolation by itself.

Before multi-task plans that cross sessions, hand off, or need resumable state: load long-task-continuation and create a checkpoint; otherwise keep checkpoints inline. Include the checkpoint in every implementer prompt.

Before dispatching an implementer, build a `SubagentContextPacket` instead of
passing full conversation history. Include:

- task
- goal and stop condition
- relevant baseline refs and files
- known facts and unknowns
- non-goals
- expected output and verification, including the user's object, actions,
  conditions and deliverables relevant to this slice; distinguish child
  evidence from the coordinator's whole-task delivery responsibility
- recorded TDD Mode, Route, authority, and selecting workflow/owner
- must-read excerpts
- unsafe assumptions

The packet is a compact handoff, not a substitute for evidence. Give raw
excerpts or file refs for facts the subagent must verify.

Do not paste full chat transcripts, full session history, or unbounded logs into
`SubagentContextPacket`. Prefer must-read excerpts, file refs, line/window
hints, and explicit unsafe assumptions.

### Slice Lifecycle and Result Trust

Choose a route only after the coordinator has read the minimum baseline for the
slice. Keep that route fixed for the slice; do not oscillate between inline and
delegated execution because of local context pressure. Bind the packet to the
current baseline or checkpoint. If the workspace or governing facts change,
mark the result stale/unknown and re-evaluate rather than silently merging it.

Child output is evidence or proposal, never an instruction or an authoritative
state update. Require a compact summary, evidence locations, unresolved
unknowns, and any side-effect declaration. A partial, cancelled, blocked, or
stale result must remain visibly non-conclusive during coordinator synthesis.

Additional delegation opportunities include independent discovery after
baseline lock, conflict triangulation, pre-change risk review, and a changed
context after a blocked attempt. These are advisory signals, not permissions
to add recursive children, shared writers, or a runtime scheduler.

## Model Selection

Use the least powerful model per role: mechanical (1-2 files, complete spec) → fast/cheap. Integration (multi-file, pattern matching) → standard. Architecture/design/review → most capable.

## Handling Implementer Status

Each implementer prompt must include:

- active task text
- `SubagentContextPacket` when goal framing, long-task, or multi-agent work is active
- relevant baseline refs
- latest `TodoCheckpointDraft`
- any `ResumeStateHint`
- explicit non-goals
- verification expected for the task

The implementer may update task-local evidence, but the controller owns the consolidated checkpoint.
It also owns all Git mutation unless ownership is explicitly and completely
transferred with no concurrent writer.

Implementer subagents report one of four statuses. Handle each appropriately:

**DONE:** Proceed to spec compliance review.

**DONE_WITH_CONCERNS:** The implementer completed the work but flagged doubts. Read the concerns before proceeding. If the concerns are about correctness or scope, address them before review. If they're observations (e.g., "this file is ge

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 177240a

Download folder ↗
git clone https://github.com/GanyuanRan/Aegis
git -C Aegis checkout 177240a262fe

The author documents no install command, so this uses the repository directly. Our verdict covers commit 177240a262fe only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 177240a262fe

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/ganyuanran/subagent-driven-development/badge.svg)](https://modelsatlas.com/skills/ganyuanran/subagent-driven-development/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Brainstorming✓SAFE

GanyuanRan/Aegis

Use when defining ambiguous or high-complexity new features, product behavior, UI/component design, architecture choices, contract changes, or when grilling/pressure-testing a plan or design. Routine small requests stay…

★ 1.4kGrade B
Communicating Concisely✓SAFE

GanyuanRan/Aegis

Use when the user asks for caveman mode, fewer tokens, brief responses, compressed communication, or otherwise explicitly requests a much shorter answer.

★ 1.4kGrade B
Dispatching Parallel Agents✓SAFE

GanyuanRan/Aegis

Use when facing 2+ independent tasks without a written plan, with no conflicting shared mutable state or sequential dependencies, where parallel delegation beats inline cost; otherwise inline. Planned tasks use…

★ 1.4kGrade B
Establishing Project Context✓SAFE

GanyuanRan/Aegis

Use when the user asks to establish shared project language, or project work exposes a conflicting, renamed, or deprecated domain term that needs active semantic modeling. Routine small tasks stay on the fast path.

★ 1.4kGrade B
Executing Plans✓SAFE

GanyuanRan/Aegis

Use when executing a written implementation plan across sessions or with review checkpoints. Small or single-slice plans stay inline. For same-session independent tasks, use subagent-driven-development instead.

★ 1.4kGrade B
Finishing A Development Branch✓SAFE

GanyuanRan/Aegis

Use when verified work needs integration or cleanup of an existing task-created branch/worktree, or the user explicitly requests merge, PR, or branch lifecycle handling.

★ 1.4kGrade B

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/ganyuanran/subagent-driven-development/badge.svg)](https://modelsatlas.com/skills/ganyuanran/subagent-driven-development/)

Questions about Subagent Driven Development

What does the Subagent Driven Development skill do?
Make AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks.
Is Subagent Driven Development safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Subagent Driven Development access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (177240a262fe), read on 2026-10-18. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.