From f2672cd82dc82cc43d3acfa712786bb1c9435545 Mon Sep 17 00:00:00 2001 From: Cameron Pfiffer Date: Tue, 27 Jan 2026 16:24:30 -0800 Subject: [PATCH] Document subagent security: explore vs general-purpose --- .skills/working-with-subagents/SKILL.md | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/.skills/working-with-subagents/SKILL.md b/.skills/working-with-subagents/SKILL.md index bf14e31..fdc6822 100644 --- a/.skills/working-with-subagents/SKILL.md +++ b/.skills/working-with-subagents/SKILL.md @@ -79,6 +79,15 @@ Return the text to post. **Purpose**: Quick reconnaissance. Gather data, don't make decisions. +**IMPORTANT**: Deploy scout as `explore` type for read-only access: +```python +Task( + agent_id="agent-e91a2154-0965-4b70-8303-54458e9a1980", + subagent_type="explore", # NOT general-purpose + ... +) +``` + **Prompt Template**: ``` **Task**: What to investigate @@ -86,12 +95,11 @@ Return the text to post. **Return**: What format you need (list, summary, raw data) ``` -**Good scout tasks**: +**Good scout tasks** (read-only): - "Check @username's recent posts for topic X" -- "Sample the firehose for 30 seconds, report hashtag frequency" +- "Read the feed at tools/feeds.py and summarize" - "Use telepathy to check what void is currently thinking about" -- "Run `uv run python -m tools.engage 5` to like timeline posts" -- "Run `uv run python -m tools.feeds discover` to find interesting content" +- "Search the codebase for X pattern" ### coder (Implementation) -- 2.51.2