Skip to content
Back to skills

Graphyloop Squad

ASecurity

Use this skill in the DeepSeek Harness whenever a task is worth more than one edit - anything you would plan, split across roles, verify, or remember. It maps the graphyloop 5-gate workflow onto dsh's own primitives: the mcp__graphyloop__* tools for swarm, memory and wave planning, and the subagent tool for delegation with a squad role prompt.

  • 3 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 9, 2026
ai-agentsgoapidatabasefrontendbackenddevopssecurityperformance

Works with

  • cli
  • api
  • mcp

Security analysis

A100/100

Scanned October 9, 2026

npx -y skills add chadixearth/graphyloop --skill graphyloop-squad --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Graphyloop Squad?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Graphyloop Squad
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/chadixearth-graphyloop-squad/badge)](https://www.skillsdirectory.com/skills/chadixearth-graphyloop-squad)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: graphyloop-squad
description: Use this skill in the DeepSeek Harness whenever a task is worth more than one edit - anything you would plan, split across roles, verify, or remember. It maps the graphyloop 5-gate workflow onto dsh's own primitives: the mcp__graphyloop__* tools for swarm, memory and wave planning, and the subagent tool for delegation with a squad role prompt.
---

# GraphyLoop squad in dsh

dsh gives you delegation (`subagent`), skills, goals, todos and a real tool
sandbox. graphyloop adds the parts dsh deliberately leaves to composition:
a persistent memory that survives the session, a swarm ledger with wave
dependencies, and a squad of role prompts. This skill is the bridge — without
it the tools are present but nothing tells you the workflow they belong to.

## When to activate

- Any request touching more than one file or more than one layer.
- Before planning anything: recall first (`mcp__graphyloop__memory_search`).
- Whenever you are about to delegate: pick a role prompt instead of improvising.
- After a decision, a fix, or a surprise: record it (`mcp__graphyloop__memory_store`).

Skip it for a one-line answer or a single obvious edit — say so and just do it.

## Tool names in this harness

The MCP bridge namespaces every tool, so the names are prefixed here and
nowhere else in the graphyloop docs:

| Purpose | Tool |
|---|---|
| Recall before planning | `mcp__graphyloop__memory_search` |
| Record a decision / lesson / pattern | `mcp__graphyloop__memory_store` |
| Correct a wrong memory | `mcp__graphyloop__memory_forget` |
| Multi-layer feature -> wave plan | `mcp__graphyloop__plan_feature` |
| Dispatch a wave (honours `dependsOn`) | `mcp__graphyloop__task_distribute` |
| Close the loop on a task | `mcp__graphyloop__task_record` |
| Swarm + memory state | `mcp__graphyloop__swarm_state` |
| Roster | `mcp__graphyloop__agent_spawn` / `mcp__graphyloop__agent_list` |
| Credentials (masked, never a value) | `mcp__graphyloop__secrets_status` / `mcp__graphyloop__secrets_set` / `mcp__graphyloop__env_sync` |
| Database / deploy readiness | `mcp__graphyloop__preflight` |
| Which skills exist on this machine | `mcp__graphyloop__skills_status` |

If a call answers `graphyloop CLI not found`, the core is missing: tell the user
to run `npx graphyloop install` and stop guessing.

## The squad, as dsh sees it

dsh has no agent files and no file-based slash commands: agents are compositions
and commands are plugins. So the squad ships as prompt text you pass to dsh's own
delegation tool.

```
~/.dsh/graphyloop/agents/<role>.md      role prompts (the squad)
~/.dsh/graphyloop/commands/chadi-*.md   the 15 workflow bodies
~/.dsh/AGENTS.md                        the 5-gate rules, loaded automatically
```

To delegate:

1. Read `~/.dsh/graphyloop/agents/<role>.md`. Its YAML header describes when the
   role applies; the body is the role prompt.
2. Call `subagent` with that body plus the concrete task, the files the child owns
   exclusively, and the acceptance check it must satisfy.
3. Start independent delegations in one message (background by default) and keep
   working; settle each with `mcp__graphyloop__task_record`.

Pick by job, not by habit: `chadi-explorer` / `graphcrew-investigator` to map
unknown code · `chadi-backend`, `chadi-frontend`, `graphcrew-builder` to build ·
`chadi-integrator` to join parallel lanes · `chadi-test`, `chadi-quality`,
`chadi-reviewer`, `chadi-security` to verify · `chadi-architect`, `chadi-think`,
`chadi-council` to decide · `chadi-data`, `chadi-devops` for schema and shipping ·
`chadi-docs`, `chadi-memory`, `chadi-performance` for the rest. `agent-chadi` is
the conductor prompt — that is you, right now.

The 15 `chadi-*` files under `commands/` are the workflows those slash commands
run elsewhere. In dsh, read the one that matches the request ("audit this repo" ->
`chadi-audit.md`, "ship it" -> `chadi-deploy.md`) and follow it. Do not invent a
`/chadi-*` command: this harness has none, and pretending otherwise wastes a turn.

## Multi-layer work

Size first: 3 or fewer known files is an inline edit, no delegation. For 4+ files
do a batched read pass and write `ctx-<slug>.md` (per lane `path:line`, code
excerpt, pattern to copy) next to the contract. Do not fan out before the
contract is frozen. `mcp__graphyloop__plan_feature`
returns wave 0 (one agent freezes schema, API, props and test scenarios), then
wave 1 builders in parallel, wave 2 integration, wave 3 verifiers in parallel,
wave 4 gated deploy. Hand that `tasks` array straight to
`mcp__graphyloop__task_distribute`, which answers `dispatchNow` for what may run
and `blocked` with `waitingOn` for what may not. Respect it — a lane dispatched
early is the drift you will spend the integration wave undoing. The
`graphyloop-waves` skill has the full protocol. End every `subagent` brief with:
`Read the ctx pack and contract first, in ONE turn. Batch 2+ reads/searches into one parallel call; read with line ranges; never re-read a file; first edit by turn 5; do not run project-wide lint/test/build — the driver does.`
Never poll a long-running job; start it in the background and end the turn.

## Which bundled skill for which task

graphyloop installs these into `$DSH_HOME/skills` — load the matching one before
delegating, and pass its checklist into the `subagent` prompt instead of paying a
skill load inside every worker:

| Task | Skill |
|---|---|
| Layered feature, parallel lanes | `graphyloop-waves` (full rules: `graphyloop-workflow`) |
| Interface two lanes share | `api-contract-design` |
| Endpoint, server action, webhook, upload | `api-hardening` |
| Client code rendering user data, tokens, env vars, third-party scripts | `frontend-security` |
| Keyboard / screen-reader / WCAG work | `web-accessibility` |
| Slow page, bundle growth, vitals regression | `web-performance` |
| New dependency, lockfile diff, CVE alert | `dependency-audit` |
| Schema, RLS, migrations | `supabase-setup` |
| Deploy, rollback | `vercel-deploy` |
| Any key or token in scope | `secrets-hygiene` |
| Start and end of a task | `swarm-memory` |

## Report honestly

Evidence, not narration: the command you ran, its output, what it proves. dsh's
own `goal` tool holds the completion contract; graphyloop's memory holds why you
made each choice. A skill you do not have is stated in one line — check with
`mcp__graphyloop__skills_status` rather than claiming one you never loaded.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.