akshay-na/subagent-response-protocol
ai/gemini-content-team/skills/subagent-response-protocol/SKILL.md
Content org: subagent → parent is one JSON object (no YAML). Validate against contracts/schemas/subagent-response.schema.json. Applies to every Task child.
$ install --global
skillsauthnpx skillsauth add akshay-na/dotfiles subagent-response-protocolInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 11, 2026, 3:36 AM48.0s1 file scanned
SKILL.md
- name:
- subagent-response-protocol
- description:
- >
- Content org:
- subagent → parent is one JSON object (no YAML). Validate against
Subagent Response Protocol (thin skill)
Child replies are one JSON object only — validate against contracts/schemas/subagent-response.schema.json. See rules/subagent-response-protocol.md.
Pointers
- Schema:
contracts/schemas/subagent-response.schema.json - Example:
templates/subagent-response.example.json - Injected contract:
contracts/subagent-contract-block.md - Hooks:
hooks/subagent-protocol-{inject,lint}.sh
Compression
- Verbatim:
schema_version,contract,_marker,status,agent, paths,fix,errors[], line numbers. - Caveman-ultra:
summary, non-securityfindings[].note,next_actions[],open_questions[]. - Security-autoclarity: full sentences when category/severity triggers (see rule).
JSON string safety
No raw secrets; no executable HTML in strings; large tool dumps → artifacts[] refs only.
Parents
cco / content-lead parse child JSON, one reformat retry, then stub. Never forward _marker to users.
Spawn / respond
- Spawning
Task: hook injects contract +_marker. - Responding as subagent: final message = JSON object only.
Related Skills
akshay-na/team-discovery
development
VerifiedTrustedCommunity
Discovery + naming convention reference for typed dev/SME/QA/devops team members in any workspace folder. Primary consumer: `tech-lead` (org-tier).
4SKILL.mdUpdated May 28, 2026
akshay-na/task-orchestration
devops
VerifiedTrustedCommunity
Automated task classification, agent selection, and state tracking. Use when routing tasks to agents, selecting pipelines, or managing task state.
4SKILL.mdUpdated May 28, 2026
akshay-na/systems-design-depth
testing
VerifiedTrustedCommunity
Use when designing scalable systems, evaluating consistency models, planning state management, making architectural decisions, or when trade-offs around coupling, failure isolation, and reversibility need explicit reasoning before implementation.
4SKILL.mdUpdated May 28, 2026
akshay-na/swarm-task-decomposition
tools
VerifiedTrustedCommunity
CTO/tech-lead helper — split work into disjoint shard briefs with caps (instance_cap, partition_basis, determinism keys).
4SKILL.mdUpdated May 28, 2026