orchestrator-v3

AdvisoryAudited by Static analysis on May 4, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may propose or coordinate multiple specialist actions, potentially including code changes or deployment steps through other agents.

Why it was flagged

The skill is designed to route work to specialist agents and coordinate their execution. This is its stated purpose, but it can lead to broad delegated actions if the user approves an overbroad plan.

Skill content
Automatically route requests to the best specialist based on task analysis.
Recommendation

Review each execution plan and checkpoint carefully, especially before approving large edits, breaking changes, or deployment-related tasks.

What this means

Project context, requirements, or other information you provide may be reused across specialist-agent steps or parallel sessions.

Why it was flagged

The workflow intentionally passes outputs and context between specialist agents. This is normal for an orchestrator, but the artifacts do not define detailed data-boundary rules for what context should or should not be shared.

Skill content
Step 1: /product-strategist → Define requirements
  ↓ (output becomes input)
Step 2: /backend-architect → Design based on requirements
Recommendation

Avoid including secrets or sensitive data in orchestration context unless necessary, and clarify which files, systems, or information each specialist should access.