AI Orchestrator

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is mostly consistent with DeepSeek browser automation, but its recovery flow includes an overbroad process-kill command and it keeps a persistent logged-in browser daemon/profile.

Review before installing. Use this only if you are comfortable sending prompts and piped file contents to DeepSeek, storing a DeepSeek browser session under the skill directory, and running a persistent PM2/Chrome daemon. Avoid the broad `pkill -f puppeteer` recovery step unless you have checked that no unrelated Puppeteer jobs are running.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A failed recovery attempt could disrupt other local automation jobs or browser-based workflows, not just this DeepSeek helper.

Why it was flagged

The recovery instructions include `pkill -f puppeteer`, which is not limited to this skill's daemon or profile and could terminate unrelated Puppeteer/browser automation processes on the host.

Skill content
pm2 stop deepseek-daemon
pkill -f puppeteer || true
rm -f .daemon-ws-endpoint .profile/Singleton*
Recommendation

Before running the reset block, confirm with the user and replace broad process kills with commands scoped to this skill's PM2 process or `.profile` directory.

What this means

Anyone or any process with access to the skill directory may be able to reuse or inspect the stored DeepSeek browser session.

Why it was flagged

The skill maintains a browser profile containing DeepSeek login/session cookies so it can use the web UI without an API key.

Skill content
`.profile/` | Chrome user data dir (persist session, cookies)
Recommendation

Use a dedicated DeepSeek account/profile if possible, protect the skill directory, and delete `.profile/` when you no longer want the session retained.

What this means

A Chrome/DeepSeek session may keep running in the background after the immediate task finishes.

Why it was flagged

The skill intentionally runs a long-lived PM2-managed browser daemon with health checks and restart behavior.

Skill content
Persistent демон (PM2) — подключение за ~35ms ... Health check — auto-restart каждые 5 минут (`daemon-healthcheck.js`)
Recommendation

Only enable daemon/PM2 mode if you want persistent background operation, and use `pm2 stop deepseek-daemon` or `pm2 delete deepseek-daemon` when done.

What this means

Private prompts, code, or chat context may remain on disk and may influence later session-based requests.

Why it was flagged

The skill preserves session context and diagnostic artifacts, which can include prompts, responses, page state, or screenshots.

Skill content
Session persistence (`--session`) — контекст между запросами ... `.diagnostics/` — Trace JSONL, metrics JSON, crash screenshots
Recommendation

Avoid sending secrets, periodically clear `.sessions/` and `.diagnostics/`, and use `--end-session` for conversations that should not persist.