Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/greenpolo/cc-multi-cli-plugin/multi-cli-runtimenpx skills add greenpolo/cc-multi-cli-plugin --skill multi-cli-runtimegit clone --depth 1 https://github.com/greenpolo/cc-multi-cli-pluginWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00021 | $0.01781 |
| Opus 5 | $0.00010 | $0.00890 |
| Sonnet 5 | $0.00004 | $0.00356 |
| Haiku 4.5 | $0.00002 | $0.00178 |
Grade A, and why
multi-cli-runtime scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Multi-CLI Runtime
Use this skill only inside multi:* forwarding subagents (codex-execute, cursor-delegate, cursor-research, cursor-explore, antigravity-researcher, antigravity-explorer, opencode-delegate, opencode-researcher, opencode-explorer, etc.).
Primary helper
node "${CLAUDE_PLUGIN_ROOT}/scripts/multi-cli-companion.mjs" task --cli <cli> --role <role> [flags] --prompt "<text>"
Where <cli> is one of codex|cursor|antigravity|opencode (or any CLI added via the multi-cli-anything skill) and <role> is the subagent's logical role. Cursor uses delegate (write/agent), research (read-only web), and explore (read-only codebase); Codex uses execute; OpenCode uses delegate (write), research (read-only web), and explore (read-only codebase); other roles in use include writer, debugger, researcher, reviewer, explorer, ask.
Execution rules
- Each
multi:*subagent is a forwarder, not an orchestrator. Its only job is to invoke the companion once and return that stdout unchanged. - Prefer the helper over hand-rolled
git, direct CLI strings (cursor agent acp,codex exec), or any other Bash activity. - Use exactly one Bash call per subagent dispatch. Do not chain
cat,sleep, polling loops, or follow-upnodecalls.
Routing flag handling
Treat these as runtime controls — strip them from the task text before forwarding, then re-add them as flags on the companion call:
--background/--wait—--wait/foreground is the default and is what you should run: the companion blocks until the CLI finishes, so your Bash call returns the real result. For long-running work, the PARENT command schedules background execution by running this subagent as a harness background task (which notifies the main thread on completion/failure) — NOT by passing--background. The companion's--backgrounddetaches a worker the harness can't see (no notification) and is only for explicit user-requested fire-and-forget polled via/multi:status.--model <name>— pass through verbatim. Leave unset unless the user explicitly asked for a model. (Antigravity ignores--model: its headlessagy -ppath is fixed to Gemini 3.7 Flash.)--effort <level>— only Codex accepts this (none|minimal|low|medium|high|xhigh|max|ultra). Other adapters ignore it. Pass through verbatim if present.--task-kind <spec|open-ended>— Codex only. The forwarder's judgment of the task shape; the companion maps it to the Codex model + effort defaults (spec→gpt-5.6-terra,open-ended→gpt-5.6-sol, bothmediumeffort). Explicit--model/--effortwin over it. Other CLIs ignore it.--resume— translate to--resume-last.--fresh— do not add--resume-last, even if the user's text sounds like a follow-up.--write— default to--writefor execute/delegate/writer/debugger/reviewer roles (these need to edit files); for read-only roles (research/explore/planner/researcher/explorer/ask) pass--read-onlyinstead (it forces write off even if--writeis also present). Honor explicit user override either way.--until-done— Codex, Cursor, and OpenCode. Tells the companion to loop resume turns on the same session until the model emitsPLAN COMPLETE, hits a hard error, runs out of turns, or stops making progress. Pass through verbatim when the user opts in. Default off — only set when the user explicitly asked for autonomous run-until-done behavior. Antigravity rejects this flag. Note: OpenCode does NOT support--effort— pass it only to Codex; OpenCode ignores it.- OpenCode role note: OpenCode has no
--read-onlyflag. For read-only roles (research,explore) the adapter enforces read-only by injecting a custom oc-* primary agent viaOPENCODE_CONFIG_CONTENTwith write/edit/bash denied, plus anOPENCODE_PERMISSIONdeny floor. Passing--read-onlyto the companion is still correct for the forwarder; the adapter handles the enforcement. --max-turns <N>— Codex and Cursor. Sets the autonomous-mode turn ceiling (default 30). Requires--until-done. Pass through verbatim if present.--plan <path>and--prompt-file <path>— both load the prompt body from a file.--planis the user-facing alias; the companion's actual flag is--prompt-file. Translate--planto--prompt-fileon the Bash call. When either flag is present:- The file's bytes ARE the prompt — do NOT paste a framing block in front of them. Skip the role-specific preamble entirely.
- Any positional task text the user provided is treated as an addendum and gets appended after the file content as a separate paragraph (the companion handles this via positional args after
--prompt-file). - The path resolves relative to the companion's
--cwdif set, else CWD. Absolute paths always work. Seemulti-plan-handoffskill for when Claude (the parent thread) should auto-add--planbased on conversation context.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 62 lines · 21 tokens per session scan A 13e98fe897fb
multi-cli-runtime is a skill published in the GitHub repository greenpolo/cc-multi-cli-plugin (89 stars, last pushed 15d ago), licensed Apache-2.0. It adds 21 tokens to every session and 1,781 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
subagent-manager
Use when the user mentions "subagent" commands, wants to coordinate worker agents, or asks to delegate tasks to a team of agents using subagent-cli. Triggers on references to subagent, worker agents, subagent-cli, or multi-agent coordination via the subagent protocol. Also use when the user says things like "チームで進めて"…
agentmail
Email infrastructure for AI agents. Create accounts, send/receive emails, manage webhooks, and check karma balance via the AgentMail API.
copilot-pr-review-loop
Drive a GitHub pull request through repeated rounds of Copilot code review until convergence. Use when the user asks to "request Copilot review", "run a Copilot review loop", iterate on Copilot feedback, or wants automated triage-and-respond on Copilot PR comments. Covers re-request mechanics, open-thread filtering…
upstream-sync
Periodically sync new commits from microsoft/terminal into this manually-forked intelligent-terminal repo by cherry-picking commit-by-commit onto a dated sync branch, auto-skipping revert pairs and empty commits, auto-resolving known take-upstream files, and stopping cleanly on genuine conflicts. The agent (you…
release-notes
Generate user-facing release notes for Intelligent Terminal. Use when asked to write release notes, changelog, what-is-new summary, or prepare a release. Compares git commits between releases, looks up PR-linked issues and community contributors, then outputs formatted notes with "Verbed + Impact + Scenario" style…
agent-creator
Create and configure AiderDesk agent profiles by defining tool groups, approval rules, system prompts, subagent settings, subagent filtering, and provider/model selection. Use when setting up a new agent, creating a profile, or configuring agent tools, permissions, and subagent behavior.