# Delegate Repository Work Safely

Repository delegation can consume time and make verification inconsistent. This skill sends bounded work to agy, then keeps review, checks, repair, and acceptance with Codex.

## Install

```bash
npx skillstore add cagdasyurekli/agy-worker
```

## Metadata

- Status: approved
- Slug: cagdasyurekli-agy-worker
- Version: 0.21.0
- Author version: 0.21.0
- Skillstore revision: r8
- Version status: valid
- Tree hash: 613e25dca9696bd64b749aaa4bb4deeef8e7dbe2442b4099aab17f779e2334fb
- Author: cagdasyurekli
- GitHub username: cagdasyurekli
- License: MIT
- Repository: https://github.com/cagdasyurekli/codex-agy-worker/tree/3da9a50afaa66492dd77f23f92c6ed4f84be4ada/skills/agy-worker
- Ref: 73b58aaf0aa4d29844f1b4c2acf4f530fc1ae7b9
- Supported tools: Codex
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem, scripts, env\_access
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/cagdasyurekli-agy-worker
- Manifest: https://skillstore.pages.dev/api/skills/cagdasyurekli-agy-worker/manifest

## Capabilities

- Delegates repository exploration, implementation, testing, and bounded repairs to agy.
- Supports explore, task, and project workflows with explicit cycle budgets.
- Binds reviewed provider scope, transmission digests, write selectors, and execution modes.
- Creates disposable worktrees and reconciles only authorized staged changes.
- Runs independent verification and preserves partial results when checks fail.
- Reports structured job status, candidates, receipts, and final verification results.

## Use Cases

- Explore an unfamiliar repository: Ask agy to map code paths or investigate a focused question, then review the evidence with Codex.
- Implement a bounded change: Delegate a feature, refactor, or test change within an approved scope and verify the resulting diff independently.
- Run a broad project workflow: Use project mode for larger audits or repairs while preserving review, checks, and delivery decisions with Codex.

## Prompt Templates

### Start a repository exploration

```
Use agy-worker to inspect the repository and explain the code paths related to [topic]. Read only the approved scope and report evidence.
```

### Implement a focused task

```
Use agy-worker to implement [change] under [paths]. Preserve existing behavior, run relevant checks, and summarize the final diff.
```

### Verify a delegated change

```
Use agy-worker to review the candidate for [task]. Run independent checks, identify gaps, and repair only within the approved scope.
```

### Run a controlled project workflow

```
Use agy-worker project mode for [objective]. Require approved provider scope, explicit model and budget, independent verification, and an evidence-based delivery decision.
```

## Limitations

- Requires Codex CLI, Bash, Python 3, Git, and agy with provider access.
- It is not a security sandbox and cannot guarantee provider correctness.
- Default session mode retains normal user filesystem and network authority.
- Claude and Claude Code hosts are not supported by this skill.

## Best Practices

- Approve the exact provider-readable content, model, budget, and isolation mode before launch.
- Prefer provider scopes and argv verification, then inspect the final diff independently.
- Keep secrets, raw logs, controller state, and unrelated private files outside approved content.

## Anti Patterns

- Do not treat installation as permission to transmit repository content.
- Do not trust worker envelopes, reported tests, or provider claims without independent checks.
- Do not use whole-worktree or shell verification modes without explicit scope and risk approval.

## Security Audit

- Audited at: 2026-09-20T21:08:34.011\+00:00
- Summary: Most static matches are benign implementation, validation, documentation, schema, or control-character checks. Confirmed risks include provider and verifier execution, environment inheritance, keychain handling, settings access, and non-sandboxed provider authority. Static review was capped at 400/991 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

## Stats

- Views: 21
- Downloads: 7
- Favorites: 0
- Popularity score: 0