Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Nm Conjure Agent Teams

v1.0.0

Coordinate Claude Code Agent Teams through filesystem-based protocol. Use

0· 49·1 current·1 all-time
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (coordinate Claude Code Agent Teams via a filesystem protocol) aligns with the instructions and modules: writing JSON to ~/.claude, fcntl-based inbox locking, tmux-based agent spawning, role/risk checks via leyline modules. The declared required config paths (night-market.delegation-core, leyline:damage-control, leyline:risk-classification) also align with references in the modules.
!
Instruction Scope
SKILL.md contains concrete runtime steps that create and modify files under ~/.claude/, spawn and kill tmux panes, and launch separate `claude` CLI processes. It also references environment variables (CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS, CLAUDECODE, and optionally ANTHROPIC_API_KEY/ apiKeyHelper) and expects tmux and the `claude` CLI to be present — but the package metadata did not declare required binaries or env vars. The instructions are local-only (no external endpoints), but they give the skill broad ability to manage processes and filesystem state on the host.
Install Mechanism
Instruction-only skill with no install spec or code files, so nothing will be downloaded or written by an installer. This reduces supply-chain risk compared to an installer that fetches arbitrary code.
!
Credentials
Registry metadata lists no required environment variables, yet SKILL.md requires/mentions several env settings (CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS, CLAUDECODE) and references possible need for ANTHROPIC_API_KEY for `--bare` mode. The skill also expects access to the user's home directory (~/.claude) and ability to spawn/kill tmux panes and run claude — these are powerful privileges that are proportionate to the stated purpose but should have been surfaced in metadata.
Persistence & Privilege
always:false (no forced permanent inclusion). The skill instructs spawning background processes (tmux panes) and atomically writing config and task files to ~/.claude. Autonomous invocation is allowed (default) — combined with the ability to spawn/kill panes and modify files, this increases blast radius if misused, but autonomous invocation alone is not an immediate red flag given the skill's purpose.
What to consider before installing
This skill coordinates local 'claude' CLI processes via files and tmux panes. Before installing, be aware it will: (1) create and write files under ~/.claude/, (2) spawn and kill tmux panes and run the `claude` CLI, and (3) expects environment variables (CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS, CLAUDECODE) and may require ANTHROPIC_API_KEY in some modes — but the registry metadata did not declare these requirements. If you intend to use it: (a) verify you have a local `claude` CLI and tmux, (b) run it in an isolated or disposable environment (container or throwaway user account) if you are uncomfortable with it modifying your home dir or processes, (c) back up any important data in your working directory, and (d) prefer human oversight for spawn/kill operations. If you need higher assurance, ask the publisher to update registry metadata to list required binaries and env vars and to justify why each is needed.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🦞 Clawdis
Confignight-market.delegation-core, night-market.leyline:damage-control, night-market.leyline:risk-classification
latestvk974m3kx1rykcgh5esea6hjakh84nr2s
49downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

Night Market Skill — ported from claude-night-market/conjure. For the full experience with agents, hooks, and commands, install the Claude Code plugin.

Table of Contents

Agent Teams Coordination

Overview

Claude Code Agent Teams enables multiple Claude CLI processes to collaborate on shared work through a filesystem-based coordination protocol. Each teammate runs as an independent claude process in a tmux pane, communicating via JSON files guarded by fcntl locks. No database, no daemon, no network layer.

This skill provides the patterns for orchestrating agent teams effectively.

When To Use

  • Parallel implementation across multiple files or modules
  • Multi-agent code review (one agent reviews, another implements fixes)
  • Large refactoring requiring coordinated changes across subsystems
  • Tasks with natural parallelism that benefit from concurrent agents

When NOT To Use

  • Single-file changes or small tasks (overhead exceeds benefit)
  • Tasks requiring tight sequential reasoning (agents coordinate loosely)
  • When claude CLI is not available or tmux is not installed

Prerequisites

# Verify Claude Code CLI
claude --version

# Verify tmux (required for split-pane mode)
tmux -V

# Enable experimental feature (set by spawner automatically)
export CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1

Protocol Architecture

~/.claude/
  teams/<team-name>/
    config.json            # Team metadata + member roster
    inboxes/
      <agent-name>.json    # Per-agent message queue
      .lock                # fcntl exclusive lock
  tasks/<team-name>/
    1.json ... N.json      # Auto-incrementing task files
    .lock                  # fcntl exclusive lock

Design principles:

  • Filesystem is the database: JSON files, atomic writes via tempfile + os.replace
  • fcntl locking: Prevents concurrent read/write corruption on inboxes and tasks
  • Numbered tasks: Auto-incrementing IDs with sequential file naming
  • Loose coupling: Agents poll their own inbox; no push notifications

Quick Start

1. Create a Team

# Programmatic team setup (via MCP or direct API)
# Team config written to ~/.claude/teams/<team-name>/config.json

The team config contains:

  • name, description, created_at (ms timestamp)
  • lead_agent_id, lead_session_id
  • members[] — array of LeadMember and TeammateMember objects

2. Spawn Teammates

Each teammate is a separate claude CLI process launched with identity flags:

claude --agent-id "backend@my-team" \
       --agent-name "backend" \
       --team-name "my-team" \
       --agent-color "#FF6B6B" \
       --parent-session-id "$SESSION_ID" \
       --agent-type "general-purpose" \
       --model sonnet

See modules/spawning-patterns.md for tmux pane management and color assignment.

3. Create Tasks with Dependencies

{
  "id": "1",
  "subject": "Implement API endpoints",
  "description": "Create REST endpoints for user management",
  "status": "pending",
  "owner": null,
  "blocks": ["3"],
  "blocked_by": [],
  "metadata": {}
}

See modules/task-coordination.md for state machine and dependency management.

4. Coordinate via Messages

{
  "from": "team-lead",
  "text": "API endpoints are ready for integration testing",
  "timestamp": "2026-02-07T22:00:00Z",
  "read": false,
  "summary": "API ready"
}

See modules/messaging-protocol.md for message types and inbox operations.

Coordination Workflow

  1. agent-teams:team-created — Initialize team config and directories
  2. agent-teams:teammates-spawned — Launch agents in tmux panes
  3. agent-teams:tasks-assigned — Create tasks with dependencies, assign owners
  4. agent-teams:coordination-active — Agents claim tasks, exchange messages, mark completion
  5. agent-teams:team-shutdown — Graceful shutdown with approval protocol

Crew Roles

Each team member has a role that determines their capabilities and task compatibility. Five roles are defined: implementer (default), researcher, tester, reviewer, and architect. Roles constrain which risk tiers an agent can handle — see modules/crew-roles.md for the full capability matrix and role-risk compatibility table.

Team Formation

For mission-level team sizing, use the Team Formation rules from references/team-formation.md. This defines:

  • Role definitions: Coordinator (mission lead), Agents (task owners), Reviewer (adversarial challenger)
  • Team sizing rules: Simple (1), Moderate (2-4), Complex (5-7), Critical (5-10)
  • Maximum team size: 10 agents (coordination overhead limit)
  • File ownership rules: Prevent conflicts with clear ownership

See references/team-formation.md for full team sizing guidance and example team formations.

Health Monitoring

Team members can be monitored for health via heartbeat messages and claim expiry. The lead polls team health every 60s with a 2-stage stall detection protocol (health_check probe + 30s wait). Stalled agents have their tasks released and are restarted or replaced following the "replace don't wait" doctrine. See modules/health-monitoring.md for the full protocol and state machine.

Module Reference

  • team-management.md: Team lifecycle, config format, member management
  • messaging-protocol.md: Message types, inbox operations, locking patterns
  • task-coordination.md: Task CRUD, state machine, dependency cycle detection
  • spawning-patterns.md: tmux spawning, CLI flags, pane management
  • crew-roles.md: Role taxonomy, capability matrix, role-risk compatibility
  • health-monitoring.md: Heartbeat protocol, stall detection, automated recovery

Integration with Conjure

Agent Teams extends the conjure delegation model:

Conjure PatternAgent Teams Equivalent
delegation-core:task-assessedagent-teams:team-created
delegation-core:handoff-plannedagent-teams:tasks-assigned
delegation-core:results-integratedagent-teams:team-shutdown
External LLM executionTeammate agent execution

Use Skill(conjure:delegation-core) first to determine if the task benefits from multi-agent coordination vs. single-service delegation.

Worktree Isolation Alternative (Claude Code 2.1.49+)

For parallel agents that modify files, isolation: worktree provides a lightweight alternative to filesystem-based coordination. Each agent runs in its own temporary git worktree, eliminating the need for fcntl locking or inbox-based conflict avoidance on shared files.

  • When to prefer worktrees over agent teams messaging: Agents work on overlapping files but don't need mid-execution communication
  • When to prefer agent teams messaging: Agents need to coordinate discoveries or adjust plans based on each other's progress
  • Combine both: Use agent teams for coordination with isolation: worktree per teammate for filesystem safety

Troubleshooting

Common Issues

tmux not found Install via package manager: brew install tmux / apt install tmux

Stale lock files If an agent crashes mid-operation, lock files may persist. Remove .lock files manually from ~/.claude/teams/<team>/inboxes/ or ~/.claude/tasks/<team>/

Orphaned tasks Tasks claimed by a crashed agent stay in_progress indefinitely. Use modules/health-monitoring.md for heartbeat-based stall detection and automatic task release. The health monitoring protocol detects unresponsive agents within 60s + 30s probe window and releases their tasks for reassignment.

Message ordering Filesystem timestamp resolution varies (HFS+ = 1s granularity). Use numbered filenames or UUID-sorted names to avoid collision on rapid message bursts.

Model errors on Bedrock/Vertex/Foundry (pre-2.1.39) Teammate agents could use incorrect model identifiers on enterprise providers, causing 400 errors. Upgrade to Claude Code 2.1.39+ for correct model ID qualification across all providers.

Nested session guard (2.1.39+) If claude refuses to launch within an existing session, ensure you're using tmux pane splitting (not subshell invocation). The guard is intentional — see modules/spawning-patterns.md for details.

Exit Criteria

  • Team created with config and directories
  • Teammates spawned and registered in config
  • Tasks created with dependency graph (no cycles)
  • Agents coordinating via inbox messages
  • Graceful shutdown completed

Comments

Loading comments...