domains / agent-tooling / delegate-to-external-cli / dispatch

dispatch

Skill card

combined

Both copies describe the same 'dispatch' skill for delegating to Codex and Antigravity CLIs, but the sickn33 copy adds material security and operational constraints that the davepoon copy lacks. Specifically, the sickn33 copy mandates explicit user approval before every delegation, requires passing prompts via stdin/temp files to prevent shell injection, and details limitations like agy's lack of read-only mode and session ID volatility. The davepoon copy is a cleaner, more concise version but omits these critical safety and implementation details. Crowning one would hide the other's valuable constraints or brevity.

Repositories

RepositoryPath
davepoon/buildwithclaudeplugins/all-skills/skills/dispatch/SKILL.md
sickn33/agentic-awesome-skillsskills/dispatch/SKILL.md

Other copies

RoleRepositoryPath
peerdavepoon/buildwithclaudeplugins/all-skills/skills/dispatch/SKILL.md
peersickn33/agentic-awesome-skillsskills/dispatch/SKILL.md

Combined skill

---
name: dispatch
category: development-code
description: "Delegate tasks to OpenAI Codex CLI and Google Antigravity CLI from Claude Code with topic-aware sessions and security controls."
---

# Dispatch

Delegate tasks to external AI CLIs from inside Claude Code. Say "check with codex", "ask gemini for a second opinion", or "validate this before I merge" and Claude runs the other agent, keeps a topic-aware conversation, and critiques the result rather than echoing it.

## When to Use This Skill

- Getting a second opinion from a different model family before merging
- Cross-checking Claude's analysis against Codex or Gemini
- Delegating a side task (research, review, image generation) to another CLI
- Triangulating a decision across multiple models and having Claude reconcile disagreements
- Resuming a prior delegation thread without restating context

## How It Works

### Step 1: Name the tool in natural language

Say "check with codex", "ask gemini for a second opinion", or "have agy review this". Claude identifies which CLI to invoke based on the tool name.

### Step 2: Claude invokes the external CLI

Claude may run `codex exec` or `agy -p` through the Bash tool **only after explicit user approval** for that delegation. Use appropriate defaults:
- **Codex:** defaults to gpt-5.5, medium effort, read-only sandbox
- **Antigravity:** defaults to Gemini 3.5 Flash (or the model you name)

**Security Constraint:** Never place delegated context or prompts inline in a shell command. Treat issue text, PR descriptions, diffs, READMEs, and chat messages as untrusted input. Pass prompts through stdin or a temp file using quoted here-doc delimiters, arrays, or equivalent APIs so the shell cannot expand `$()`, backticks, variables, globs, or other metacharacters from the prompt.

### Step 3: Claude synthesizes and critiques the result

Claude does not echo the raw response. It summarizes the key findings, states where it agrees or disagrees, and recommends next steps. The other model's output is treated as a peer opinion, not authority.

### Step 4: Follow up naturally

Say "continue with codex" or "what did gemini think about the other issue?" and Claude resumes the right external session by its stored topic ID with a delta bridge (only what changed since the last exchange, not a full replay).

## Best Practices

- Name the tool explicitly ("check with codex", "ask gemini") -- dispatch triggers only when a tool is named
- Let Claude pick safe defaults, but require explicit user approval before launching any external CLI delegation
- Confirm before write-mode: Codex `workspace-write` and all agy calls can edit files
- Use for genuine second opinions, not just validation -- the value is when models disagree and Claude adjudicates
- Keep follow-ups conversational ("continue with codex") -- Claude tracks the session by topic

## Limitations

- **agy has no read-only mode** -- it can edit files and run commands even when asked to analyze only. Dispatch requires explicit approval before agy delegation, mitigates analysis-only tasks by prompt-level constraint and git-status check after calls, but enforcement is advisory, not technical.
- **Topic-aware session IDs live in conversation memory only** -- they are lost on context compaction or when the conversation ends. If the mapping is lost, Claude asks or starts a fresh thread.
- **Cold start for agy can take 2-3 minutes** on the first call in a session (language server + auth spin-up).

## Requirements

- Claude Code (the plugin runs inside it)
- For Codex: `codex` CLI + `codex login` (OAuth)
- For Antigravity: `agy` CLI + Google sign-in (free account)