Skip to content
Back to skills

Duolog

CSecurity

Use only in a project that has .duolog/config.yaml. Delegate bounded tasks to Claude or Codex for short answers or second opinions.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 6, 2026
ai-agentsgoshellbashgit

Works with

  • cli
  • mcp

Security analysis

C71/100
  • criticalPipes output to a shell interpreter
  • mediumUses curl or wget to download content
  • criticalDownloads and executes remote scripts — classic supply chain attack

Pro shows the line behind each finding and how to fix it

Scanned November 11, 2026

npx -y skills add lorem-dev/duolog --skill duolog --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Duolog?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Duolog
[![Security: C — Skills Directory](https://www.skillsdirectory.com/api/skills/lorem-dev-duolog/badge)](https://www.skillsdirectory.com/skills/lorem-dev-duolog)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: duolog
description: >-
  Use only in a project that has .duolog/config.yaml. Delegate bounded
  tasks to Claude or Codex for short answers or second opinions.
allowed-tools: Bash(duolog version), Bash(duolog doctor), Bash(duolog roster), Bash(duolog route *), Bash(duolog caps), Bash(duolog caps *), Bash(duolog stats), Bash(duolog inbox *), Bash(duolog peer status *), Bash(duolog peer wait *)
metadata:
  duolog-version: "1.8.2"
---

Stop unless this project has `.duolog/config.yaml`.

# duolog

## First

1. Run `duolog version`. If not found, tell the user and offer the command
   below; run it only if they agree.

   macOS/Linux:

   ```sh
   curl -fsSL https://github.com/lorem-dev/duolog/releases/download/v1.8.2/install.sh | sh -s -- --version v1.8.2 && duolog install --scope project
   ```

   PowerShell:

   ```powershell
   $env:DUOLOG_VERSION = 'v1.8.2'; irm https://github.com/lorem-dev/duolog/releases/download/v1.8.2/install.ps1 | iex
   ```

   Windows: add the printed directory to PATH; run
   `duolog install --scope project`.
2. Run `duolog doctor` once per session. If rules are off, tell the user
   what it names (`/hooks`) first.

## Hand over

Do settled steps without explaining them; report results.
If a PR is requested or required, batch small changes into one.

Use loaded duolog MCP `delegate`, `peer`, `answer_ask`, `status`; they return `run_here` as data.
Use CLI only for missing or failed tools.

1. Give whole features to `planner`; small fixes: yourself.
2. First record the starting checkout, branch and existing edits.
   Write `.duolog/task.md`: Goal, Read, Write (ranges, edited docs),
   Limits, Run (optional), Check.
3. Call `delegate`. If `running`, call `result`
   with the id as task_path (`status` lists runs).
   CLI: background `duolog delegate <role> --task .duolog/task.md`; await notice.
4. Read only summary, `git diff --stat`, marked hunks and `answer.json`'s
   `decisions=`; skip full suites.
   Batch nameable reads in parallel.
5. Keep hard parts. Finish with `review_final` (`review_cross` for big
   batches) without asking; check worker results first. Return findings
   to the worker or fix them.
   End only with results or decisions only the person can make.
   Start closing questions with the decision.

Worker rules: `.duolog/brief.md`. Multiple leads: `--lead <id>`. Learning: `duolog task start` first.
Same-vendor subagents use your tools.

## On `run here`

- `run here: self`: read only the listed ranges.
- `run here: subagent model=M effort=E`: use the Agent tool with M, E and
  task text; no duolog.

## Asks

For `"p":true` asks, tell the person; never answer yourself.
Foreground delegates deny asks; workers list commands in `needs`.
Use `duolog allow <n>`, `duolog deny <n>` or, with approval,
`duolog remember '<command>'`.

## Live sessions (Rex)

Answer `duolog peer wait` with `duolog peer answer <id> <option>`;
background each wait. Run independent tasks in parallel, one worker per
`.worktrees/` worktree; stack dependent work on that task's branch.

Before reporting done, review and bring the peer's task changes into the
starting checkout on its original branch, unless the person requested another
branch or PR. Keep changes
uncommitted unless a commit was requested or required; preserve existing
staged, unstaged and untracked work. If integration conflicts, report the
blocker instead of completion. Verify the integrated result there and tell
the person its path, branch and commit status.

Never send `/model` or `/effort` to a Claude pane.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.