A guide for using separate helper agents to investigate or work on independent parts of a difficult task.

Use it for codebase exploration, research, test writing, large refactors, and other tasks that can be divided into separate workstreams.

It helps split complex work into parallel investigations while keeping the main coding session focused.

subagents — Skill for Claude Code by rajitsaha

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add rajitsaha/100xprism --skill subagents

Clone the repo

git clone --depth 1 https://github.com/rajitsaha/100xprism

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/rajitsaha/100xprism/subagents/github.svg)](https://agentmods.dev/skills/rajitsaha/100xprism/subagents)

Your own site

<a href="https://agentmods.dev/skills/rajitsaha/100xprism/subagents"><img src="https://agentmods.dev/badge/skills/rajitsaha/100xprism/subagents/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/rajitsaha/100xprism/subagents"><img src="https://agentmods.dev/badge/skills/rajitsaha/100xprism/subagents.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,366 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 4 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Excessive Agency · line 3
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
medium Excessive Agency · line 46
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
medium Excessive Agency · line 48
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
medium Excessive Agency · line 41
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00050	$0.01366
Opus 5	$0.00025	$0.00683
Sonnet 5	$0.00010	$0.00273
Haiku 4.5	$0.00005	$0.00137

Measured 8d ago against content hash bd213667484d, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

subagents scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/subagents/SKILL.md · 124 lines

How it starts

The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Invoke this skill when a task is complex, exploratory, or parallel in nature. Subagents keep the main context clean and focused.

When to Use Subagents

Append "use subagents" to any request where you want Claude to throw more compute at the problem
Use for: codebase exploration, parallel analysis, research, large refactors, test writing
Do NOT use for: simple one-file edits, quick lookups, single-step tasks

Three Subagent Strategies

A. Parallelization

Offload independent tasks to separate subagents running simultaneously:

use 5 subagents to explore the codebase
→ Explore entry points and startup
→ Explore React component structure
→ Explore tools implementation
→ Explore state management
→ Explore testing infrastructure

B. Context Isolation

Offload heavy research or analysis to a subagent so the main agent's context stays focused on the implementation.

Research → subagent → returns a structured result (see Standard return contract below)
Main agent uses the result, never sees the raw noise

Reframe for the 1M-context era: with a 1M-token window, token savings is no longer the main reason to isolate. Isolate for parallelism (independent work running at once) and adversarial independence (a fresh subagent with zero authoring context reviews work without self-review bias). Treat context savings as a side benefit, not the goal.

C. Permission Routing via Hook

Auto-approve obviously-safe tool calls so they don't interrupt with a prompt, while anything risky still falls through to human review. 100xprism ships this as a real, installable artifact — not just advice:

Artifact: ~/100xprism/hooks/permission-router.py (a PreToolUse Bash hook).
Tier 1 (offline): a deterministic allowlist auto-approves read-only commands (ls, cat, git status, grep, …); destructive/network/credential commands are never auto-approved.
Tier 2 (optional): set HOOK_ROUTER_MODEL=claude-haiku-4-5 (needs the claude CLI) to route ambiguous commands to a cheap model; only a confident "safe" verdict grants permission, so escalation to a deeper model (e.g. Opus 5) or a human is the default for anything uncertain. The router never blocks — it only grants.
Enable it: re-run the installer and turn on the permission-router hook (it ships off by default), or run python3 ~/100xprism/adapters/lib/modules.py emit-hooks with HOOK_ROUTER=1.
See ~/100xprism/hooks/README.md and the hooks docs: https://docs.claude.com/en/docs/claude-code/hooks

Read the full file on GitHub · 124 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

.100xprism-generated 89 B

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago First seen · 124 lines · 50 tokens per session scan A bd213667484d

Subscribe to this mod's changes

subagents is a skill published in the GitHub repository rajitsaha/100xprism (10 stars, last pushed 11d ago), licensed MIT. It adds 50 tokens to every session and 1,366 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Building agents agentic-coding ai-agents ai-coding ai-developer-tools ai-workflows antigravity engineering

engineering-advanced-skills

Index of 37 advanced engineering agent skills for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw. Use when browsing or choosing among the POWERFUL-tier engineering skills: agent design, RAG, MCP servers, CI/CD, database design, observability, security auditing, changelog/release automation, reliability…

sinhoneyy/master-skills · 84 tokens

analyzing-windows-lnk-files-for-artifacts

Parse Windows LNK shortcut files to extract target paths, timestamps, volume information, and machine identifiers for forensic timeline reconstruction.

marysatasselshaped667/skills-collection-1 · 36 tokens

analyzing-command-and-control-communication

Analyzes malware command-and-control (C2) communication protocols to understand beacon patterns, command structures, data encoding, and infrastructure. Covers HTTP, HTTPS, DNS, and custom protocol C2 analysis for detection development and threat intelligence. Activates for requests involving C2 analysis, beacon…

marysatasselshaped667/skills-collection-1 · 80 tokens

analyzing-memory-forensics-with-lime-and-volatility

Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux memory images. Use when performing incident response on compromised Linux systems.

marysatasselshaped667/skills-collection-1 · 71 tokens

analyzing-active-directory-acl-abuse

Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths.