subagent-orchestrator

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: subagent-orchestrator Version: 1.0.0 The skill bundle is a legitimate orchestration framework for managing multi-agent 'autopilot' workflows. It defines a structured communication protocol (SUBAGENT_RECORD_PROTOCOL.md) and state management rules (SKILL.md) using local markdown files like AGENT_TASK_BOARD.md and memory logs. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the instructions focus entirely on coordinating task handoffs and maintaining workflow continuity.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An active autopilot line may continue through multiple delegated steps before asking again, depending on the task board and stop conditions.

Why it was flagged

The skill intentionally enables chained subagent dispatch without asking the user to restate each step. This is purpose-aligned, but users should ensure task lines are clearly scoped.

Skill content
For every autopilot line, the main controller decides the next slice and spawns it.
Recommendation

Use clear task-board entries, end conditions, and need_user or blocked gates for risky, destructive, public, or account-impacting work.

What this means

Incorrect, sensitive, or overly broad memory entries could persist and affect future agent decisions.

Why it was flagged

The skill writes durable task records and collaboration rules that may be reused in later sessions.

Skill content
Before forgetting them, write the durable record into `memory/YYYY-MM-DD.md`... Promote stable collaboration rules into `MEMORY.md` when needed.
Recommendation

Review memory records periodically and avoid storing secrets, unnecessary private data, or unverified instructions in persistent memory files.