orchestrator

Restrict the main Claude Code thread to read-only operations and delegate file writes to subagents.

Updated Feb 19, 2026
One-click install
npx skills add https://github.com/kzarzycki/agent-skills --skill orchestrator-kzarzycki
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: orchestrator
Source: https://github.com/kzarzycki/agent-skills/tree/main/workflow/skills/orchestrator
Command: npx skills add https://github.com/kzarzycki/agent-skills --skill orchestrator-kzarzycki

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Prevents accidental or unauthorized file edits from the main Claude Code thread by forcing all write operations to run through subagents.

Core Features & Use Cases

  • Read-only main thread with delegation: Blocks main-thread Edit/Write/MultiEdit and write-style shell operations while allowing safe reads and Task()-based delegation.
  • Instant toggle and status: Enables or disables orchestrator mode immediately without requiring a Claude Code restart.
  • Safety guardrails: Adds always-active protections for sensitive files (like .env) and blocks dangerous recursive rm patterns.

Quick Start

Run /orchestrator on from your project root to enable orchestrator mode and route all file writes to subagents.

Frequently Asked Questions about orchestrator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I restrict the main Claude Code thread to read-only file operations?

You can restrict the main thread to read-only operations by enabling orchestrator mode, which blocks main-thread Edit, Write, and MultiEdit tools while delegating file modifications to subagents via Task(). Run /orchestrator on from your project root to activate it instantly.

Can I delegate file writes to subagents without restarting Claude Code?

Yes, you can delegate file writes to subagents without restarting by using the orchestrator toggle script. Running /orchestrator on or /orchestrator off immediately switches the delegation mode and restricts or restores main-thread write capabilities in real-time.

What safety guardrails are active when routing file edits through subagents?

Orchestrator mode enforces safety guardrails that protect sensitive files like .env and block dangerous recursive rm bash patterns. The hook intercepts classified write operations, ensuring unauthorized or destructive commands are prevented before execution by the subagent.

How do I recover when the orchestrator hook blocks a tool call?

When the pre tool use hook blocks a tool call, orchestrator mode provides built-in recovery instructions to help you route the blocked operation correctly. You must delegate the specific file write or edit task to a subagent using Task() to bypass the main-thread restriction.

Does orchestrator mode block shell commands in addition to file editing tools?

Yes, orchestrator mode blocks write-style shell operations in addition to standard file editing tools. The pre tool use hook classifies and intercepts bash write patterns, restricting the main thread to safe reads while ensuring all modifications are delegated to subagents.

When should I avoid using a read-only main thread with subagent delegation?

You should avoid using a read-only main thread if your workflow requires rapid, direct edits from the primary thread without subagent overhead. Since orchestrator mode strictly blocks all main-thread write operations, it is best suited for complex tasks rather than quick, isolated file modifications.