Skip to content
Back to skills

2669 Notes 8206e669

ASecurity

- Target is not "Claude calls others", but "neutral orchestration where any supported CLI can be entrypoint or worker". - User environments differ; provider availability must be dynamic and capability-driven.

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 11, 2026
devopsgoapi

Works with

  • cli
  • api

Security analysis

A100/100

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 2669-notes_8206e669 --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 2669 Notes 8206e669?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 2669 Notes 8206e669
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-2669-notes-8206e669/badge)](https://www.skillsdirectory.com/skills/tools-only-2669-notes-8206e669)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

SKILL.md
# Notes: Multi-CLI Orchestration (Claude/Codex/Gemini/OpenCode/Qwen)

## Problem Reframe
- Target is not "Claude calls others", but "neutral orchestration where any supported CLI can be entrypoint or worker".
- User environments differ; provider availability must be dynamic and capability-driven.

## Non-Goals and Constraints
- Non-goal: building a hosted multi-tenant SaaS in v1; scope is local or single-team deployment.
- Non-goal: perfect semantic dedupe from day one; start with deterministic+heuristic hybrid.
- Constraint: support only five providers in initial scope (`claude`, `codex`, `gemini`, `opencode`, `qwen`).
- Constraint: adapters must run via official CLI contracts, not private reverse-engineered APIs.
- Constraint: provider availability is runtime-detected and user-configurable; no hard-required provider.

## Core Requirements
- Support exactly five providers first: `claude`, `codex`, `gemini`, `opencode`, `qwen`.
- Runtime discovery of installed/configured providers.
- Task execution can be asynchronous with completion notification.
- Multi-provider review results are persisted under docs directory with traceability.
- Avoid hard dependency on any single vendor-specific workflow.

## Architecture Principles
- Orchestrator core owns lifecycle, queue, retries, notifications, storage.
- Provider adapters are thin wrappers around CLI command contracts.
- Routing is policy-based (capability + cost + latency + confidence), not hardcoded.
- Output normalized into one canonical finding schema for cross-provider comparison.

## Risks
- Different output formats and stability across providers.
- Credential/auth setup varies by provider.
- Cost and latency increase with multi-provider fan-out.
- Finding deduplication and conflict resolution required.

## Evaluation Metrics
- Review acceptance rate by humans.
- Precision/false-positive rate by severity.
- Time-to-feedback and cost per reviewed change.
- Incremental value of 2nd/3rd provider (marginal gain).

## Glossary
- Provider Adapter: Wrapper that maps a specific CLI to the orchestrator interface.
- Capability Tier: Normalized maturity level of a provider for automation (JSON, resume, schema, etc.).
- Task ID: Stable orchestration identifier for one user request.
- Idempotency Key: Hash key used to deduplicate repeated submissions of the same task.
- Run Attempt: One provider execution attempt within a task.
- Partial Success: Task result where at least one required provider succeeded and policy allows completion.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…