Delegate

• Analyzed: May 12, 2026, 3:52 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3b76c73b1bf52d0cc666494c532e07a9085bdec49820cfa2e70ba128141362d2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle 'delegate' is designed to manage and route tasks to sub-agents. While this involves powerful capabilities such as code execution, file system access, and network operations (as seen in `templates.md`), the skill itself does not exhibit malicious intent. Crucially, `SKILL.md` includes security-conscious instructions like 'CONTEXT: Only files/info needed (never full history)' to limit information exposure to sub-agents, and 'Verification' steps to prevent blind trust of sub-agent outputs. The instructions are clear, focused on efficient task delegation and error recovery (`errors.md`), and lack any evidence of data exfiltration, persistence, unauthorized actions, or prompt injection attempts against the main agent.