Agent Collaboration Framework

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: agent-collab Version: 1.0.0 The skill bundle defines a legitimate multi-agent collaboration framework for OpenClaw, utilizing standard tool calls like sessions_spawn and a filesystem-based handoff mechanism within designated workspace directories (~/.openclaw/workspace-*). There is no evidence of malicious intent, data exfiltration, or unauthorized command execution in SKILL.md or _meta.json.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Information sent to one agent may be available for cross-agent collaboration depending on the user’s OpenClaw configuration.

Why it was flagged

The setup asks the user to make sessions broadly visible so agents can collaborate. This fits the skill purpose, but it means context may be shared across agents more widely than a single-session workflow.

Skill content
"tools": { "sessions": { "visibility": "all" } }
Recommendation

Enable broad session visibility only for agents you trust, and restrict collaboration to the specific agents needed for your workflow.

What this means

Sensitive details placed in HANDOFF files may be read by the receiving agent, and deletion after reading can reduce auditability.

Why it was flagged

The HANDOFF workflow stores instructions in local files that another agent later reads and deletes. This is a disclosed fallback mechanism, but users should treat those files as task-bearing context.

Skill content
写入 ~/.openclaw/workspace-content/HANDOFF-FROM-MAIN.md ... *接收方讀取後刪除此文件*
Recommendation

Keep HANDOFF files limited to intended task details, avoid secrets, and ensure only trusted users or agents can write to the OpenClaw workspace directories.

NoteMedium Confidence
ASI08: Cascading Failures
What this means

A poorly scoped request could lead to extra agent activity or duplicated work across departments.

Why it was flagged

The framework allows department agents to delegate within their own scope without routing every task through Main. This is purpose-aligned, but a mistaken task could propagate to multiple subagents.

Skill content
**部門主管在自己範圍內自主調度**,不需要經過 Main
Recommendation

Review the allowAgents lists, keep department scopes narrow, and ask agents to confirm before delegating high-impact tasks.