Geepers Orchestrate
v1.0.0Run multi-agent Dream Cascade (hierarchical 3-tier synthesis) or Dream Swarm (parallel multi-domain search) workflows via the dr.eamer.dev orchestration API....
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md describes an orchestration/orchestrator purpose (multi-agent Dream Swarm/Cascade) which aligns with the name/description, but the registry metadata declares no required credentials while the instructions explicitly require DREAMER_API_KEY. That mismatch is unexplained and reduces trust in the metadata.
Instruction Scope
Runtime instructions are limited to POSTing to https://api.dr.eamer.dev with example payloads and expect an API key. The instructions do not ask the agent to read local files or other unrelated environment variables, but they do direct arbitrary user queries (potentially sensitive) to a third-party endpoint — appropriate for an orchestrator but important to be aware of.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk or installed during setup. That minimizes installer-related risk.
Credentials
Although registry metadata lists no required env vars, SKILL.md instructs the user to export DREAMER_API_KEY. The skill therefore implicitly requires a secret credential but fails to declare it. Additionally, the payloads reference a 'provider' field (e.g., "anthropic") which could imply further credential needs in real use; those are not documented.
Persistence & Privilege
The skill does not request always:true or any system-level config; it is user-invocable and retains no install-time persistence. Autonomous model invocation is enabled by default (normal), but there are no additional elevated privileges requested.
What to consider before installing
This skill appears to forward user queries to an external orchestration API (api.dr.eamer.dev). Before installing, verify the service and its privacy/security posture (owner, documentation, TLS certificate, data retention and sharing policies). Ask the publisher why the registry metadata does not list DREAMER_API_KEY even though SKILL.md requires it, and request explicit documentation of what data is sent and whether the key has limited scope. Avoid sending sensitive or private data through this skill until you confirm the vendor and key handling. If you want to reduce risk, require explicit user approval before any call or run test queries with non-sensitive data and a throwaway API key.Like a lobster shell, security has layers — review code before you run it.
latest
Dreamer Orchestrate
Run multi-agent workflows through https://api.dr.eamer.dev.
Authentication
export DREAMER_API_KEY=your_key_here
Endpoints
Dream Swarm — Parallel Search
POST https://api.dr.eamer.dev/v1/orchestrate/swarm
Body:
{
"query": "What are the most effective treatments for Type 2 diabetes?",
"sources": ["pubmed", "semantic_scholar", "wikipedia"],
"num_agents": 5
}
Runs multiple agents simultaneously across data sources and synthesizes results.
Dream Cascade — Hierarchical Synthesis
POST https://api.dr.eamer.dev/v1/orchestrate/cascade
Body:
{
"task": "Analyze the current state of quantum computing hardware",
"num_agents": 8,
"provider": "anthropic"
}
Three-tier workflow: Belter agents gather raw data → Drummer agents synthesize domains → Camina produces executive summary.
Response Format
Both endpoints return:
{
"result": "Synthesized answer...",
"sources": [...],
"agent_count": 5,
"duration_ms": 12450
}
When to Use
- Complex research questions requiring multiple perspectives
- Cross-domain synthesis that would take multiple sequential queries
- Long-horizon analysis where parallelism saves time
Don't Use When
- Simple single-source queries (use dreamer-data instead)
- You need fine-grained control over individual agent behavior
- Latency is critical (orchestration takes 10-60 seconds)
Comments
Loading comments...
