Skip to content
Back to skills

Controlflow Orchestration

ASecurity

Use when executing an approved multi-phase plan in Cursor, with gates, approvals, retries, and Task delegation to controlflow subagents.

  • 13 stars
  • 0 votes
  • 0 copies
  • 4 views
  • Added May 27, 2026
data-aicode-reviewsecurity

Works with

  • cursor

Security analysis

A100/100

Pro scans all 5 files and shows the line behind each finding

Scanned September 6, 2026

npx -y skills add Smithbox-ai/ControlFlow --skill controlflow-orchestration --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Controlflow Orchestration?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Controlflow Orchestration
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/smithbox-ai-controlflow-orchestration/badge)](https://www.skillsdirectory.com/skills/smithbox-ai-controlflow-orchestration)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: controlflow-orchestration
description: "Use when executing an approved multi-phase plan in Cursor, with gates, approvals, retries, and Task delegation to controlflow subagents."
---

# ControlFlow Orchestration (Cursor)

## Overview

Execute an approved plan with explicit state, disciplined gates, bounded retries, and local evidence. Does not use VS Code `agent/runSubagent`.

## Local Contract

- Start from `plans/<task-slug>-plan.md`; use `controlflow-planning` if missing.
- Confirm strict plan review before non-trivial execution.
- Track current phase, last verification, blocker, and next action.

## Workflow

1. Confirm plan path, phase, target files, validation command, approval needs.
2. Verify review routing: `SMALL` → plan audit; `MEDIUM`/`LARGE` → assumption verifier; `LARGE` → executability verifier; `HIGH` risk → assumption verifier.
3. If review blocks, revise plan before implementation.
4. Serialize phases unless write ownership is clearly disjoint.
5. **Delegation:** For each phase `executor_agent`, prefer Task to the matching `.cursor/agents/controlflow-*.md` subagent. Parent must not implement when an implementer subagent is assigned.
6. Use `references/failure-taxonomy.md` and `references/runtime-policy.json` for retry/replan.
7. Gate destructive actions behind explicit user approval (Cursor AskQuestion when appropriate).
8. After each phase, run phase checklist; update plan lifecycle sections.
9. Save artifacts under `plans/artifacts/<task-slug>/`.

## Task Delegation Examples

| Phase role | subagent_type |
| ---------- | ------------- |
| CodeMapper | `controlflow-code-mapper` |
| Researcher | `controlflow-researcher` |
| Core implementer | `controlflow-core-implementer` |
| UI implementer | `controlflow-ui-implementer` |
| Platform | `controlflow-platform-engineer` |
| Docs | `controlflow-technical-writer` |
| Browser test | `controlflow-browser-tester` |
| Code review gate | `controlflow-code-reviewer` |

**Fallback:** Execute the role instructions in the parent session using the matching skill; record that fallback in the plan `## Decision Log`.

## Stop-the-Line

Stop when verification fails, assumptions break, security risk appears, or approval is missing. Classify failures per failure taxonomy before retry.

## References

- `references/runtime-policy.json`
- `references/failure-taxonomy.md`
- `references/phase-checklist.md`
- `docs/agent-engineering/CURSOR-SUPPORT.md`

Files in this skill

  • SKILL.md3.4 KB
  • references/failure-taxonomy.md1014 B
  • references/phase-checklist.md685 B
  • references/runtime-policy.json1.5 KB
  • references/tdd-patterns.md2.9 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.