Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Daxiang Agent Dispatch
v1.0.0自动识别用户意图并根据预设规则选择最合适的专家agent进行任务调度与结果整合，支持重试与并行处理。
⭐ 0· 65·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name, description, and the provided routing config.json align: this is a dispatcher that routes tasks to specialist agents (coder, writer, etc.). No unexpected binaries, installs, or credentials are requested.
Instruction Scope
SKILL.md focuses on intent identification, route matching, spawning agents, parallel dispatch, retries, and result aggregation — which is consistent with a dispatcher. However, there are multiple implementation/instruction issues: (1) the intent object returned by identify_intent does not include user_input, but match_route searches intent["user_input"]; (2) handle_failure calls dispatch_task with the wrong arguments (passing retry count where intent and user_input are expected); (3) routing priority semantics are ambiguous (text says "priority order" but no explicit sort before matching); (4) several sections are truncated/unfinished in the document, indicating sloppy/incomplete instructions. These make runtime behavior unclear and could lead to unintended forwarding of user data to subagents or failures.
Install Mechanism
Instruction-only skill with no install spec and no code files beyond SKILL.md and config.json — lowest install risk. Nothing is downloaded or written to disk by an installer.
Credentials
No required environment variables, credentials, or config paths are requested. The config.json routing and the SKILL.md parameters are proportional to the stated purpose.
Persistence & Privilege
Skill is not always-enabled and has default autonomous invocation flags; that is normal. The skill does not request elevated persistence or attempt to modify other skills' config in the provided materials.
What to consider before installing
This skill is generally coherent with its purpose (dispatching to specialist agents) but the SKILL.md contains coding and documentation inconsistencies that could cause unpredictable behavior. Before installing or enabling it: 1) Verify how your platform's spawn_agent / sessions_spawn primitives work (what data is sent to subagents and where results are returned). 2) Fix and test the bugs in the instructions (missing user_input in intent, wrong parameters in handle_failure, clarify priority ordering) in a safe/test environment. 3) Confirm logging/metrics do not leak sensitive user input to logs or external endpoints. 4) Limit parallelism and retry behavior until you have tested fallback semantics. If you cannot review or test those items, treat the skill as risky because it may forward user data unpredictably to other agents.Like a lobster shell, security has layers — review code before you run it.
latestvk973zx67kqpkhs88fkbagygqw983z3e4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.