Respond First

PassAudited by ClawScan on May 10, 2026.

Overview

This instruction-only skill openly delegates user tasks to persistent sub-agents, with no code, install steps, credentials, or hidden endpoints shown.

This skill appears coherent and benign as an instruction-only multi-agent dispatcher. Before using it, remember that it passes task context to persistent sub-agent sessions; avoid including secrets or unrelated private information unless delegation is appropriate.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information included in a task may be passed to a sub-agent rather than handled only by the main chat agent.

Why it was flagged

The skill routes task details from the main agent to sub-agents. This is the stated purpose, but it means user-provided context may be copied into another agent session.

Skill content
All real work MUST be delegated via `sessions_spawn`.
Recommendation

Avoid putting secrets or unnecessary private data into delegated task descriptions unless you are comfortable sharing them with the sub-agent session.

NoteHigh Confidence
ASI10: Rogue Agents
What this means

Delegated work may continue asynchronously for a short period and may reuse persistent agent sessions across tasks.

Why it was flagged

The sub-agents are intentionally persistent and reused through fixed session keys. This is disclosed and purpose-aligned, but persistence can retain task context unless the platform or user clears it.

Skill content
You have 5 persistent sub-agents, each with a permanent sessionKey
Recommendation

Use this skill for tasks where persistent delegation is acceptable, and prefer a reset or fresh session if working with unrelated sensitive tasks.