Skill audit report

agent-launcher-orchestrator Audit report.

Use when a user wants to build, launch, grade, or schedule a Claude Managed Agent (CMA) in their own Anthropic account — "build me an agent", "launch this as a managed agent", "run this on a schedule", "grade my agent against a rubric", "set up a nightly worker". Reads the per-session goal (./my-agent/goal.json), routes deterministically to one of five phase sub-skills (interview → stage-launch → grade-iterate → run-without-you → wrap-up) via goal_router.py, and compiles the goal+phase into an execution shape (single-pass workflow / bounded grade→iterate loop / recurring cron deployment loop) via loop_compiler.py. Forks context so heavy intake (build sheets, payloads, eval cases) stays out of the parent thread. All launches are emitted as BYOK curl the user runs with their own key; no tool makes API calls. Inspired by anthropics/launch-your-agent (Apache-2.0). Distinct from engineering/agent-harness (generic domain loop) and engineering/write-a-skill (authors Claude Code skills, not CM

EXPERIMENTAL · REVIEWNeeds reviewGenerated Nov 7, 2026Heuristic metadata audit
83
Audit
75
Trust
92
Quality
76
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

75
Strong shortlist

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

PASS

100

25K GitHub stars

Stars/forks activity

PASS

97

25K stars, 3.5K forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

2mo since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

PASS

84

Metadata includes enough usage and workflow context

Dependency/runtime risk

INFO

64

command execution surface, network or browser surface

Install availability

PASS

92

npx skills add alirezarezvani/claude-skills --skill agent-launcher-orchestrator

Install command safety

PASS

92

standard package or runtime install path

Permission surface

WARN

50

shell or command execution, network or browser access

Repository evidence

PASS

86

https://github.com/alirezarezvani/claude-skills/tree/main/.gemini/skills/agent-launcher-orchestrator

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

8 Passed · 8 Needs review

Install path

92

PASS

npx skills add alirezarezvani/claude-skills --skill agent-launcher-orchestrator

Repository

88

PASS

https://github.com/alirezarezvani/claude-skills/tree/main/.gemini/skills/agent-launcher-orchestrator

License

86

PASS

MIT

Maintenance

88

PASS

2mo since push

AI review

55

CHECK

The underlying Python scripts (goal_router.py, loop_compiler.py, goal_state.py) are not included in the submission, so their behavior cannot be fully audited; ensure they do not execute untrusted content from goal.json or make unintended network calls.

README/SKILL.md completeness

84

PASS

Usable description available

Dependency risk

64

CHECK

command execution surface, network or browser surface

Install command safety

92

PASS

standard package or runtime install path

Permission surface

50

FIX

shell or command execution, network or browser access

Stars/forks activity

97

PASS

25K stars, 3.5K forks; issue activity unavailable in current metadata

Adoption

88

PASS

25K GitHub stars

Warnings

  • Permission surface may require sandboxing
  • The underlying Python scripts (goal_router.py, loop_compiler.py, goal_state.py) are not included in the submission, so their behavior cannot be fully audited; ensure they do not execute untrusted content from goal.json or make unintended network calls.
  • The SKILL.md excerpt ends mid-sentence in the forcing-question library, which may indicate truncation in the submitted documentation; verify the full file is present and complete.
  • Permission surface needs review: shell or command execution, network or browser access
  • Permission surface: shell or command execution, network or browser access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next