Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Doc Orchestrator

v2.0.0

Orchestrate multi-chapter document generation using sub-agents. Use when producing long structured documents (PRDs, technical specs, research reports, design...

0· 335·0 current·0 all-time
bynicola@nicolayao
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description (orchestrating multi-chapter documents using sub-agents) match the SKILL.md instructions. The skill is instruction-only and requires no extra binaries, env vars, or installs — which is proportionate for an orchestration/coordination role.
Instruction Scope
Instructions explicitly direct the agent to create/read/update a per-task orchestration JSON and multiple chapter files, spawn sub-agents, and run simple shell commands (sed/grep/cat). This is within scope for document orchestration, but it persists potentially large/complete document content to disk (state JSON and chapter files), which can leak sensitive content if the task directory is not isolated. The prompts also assume shell utilities exist and that sub-agents will obey file-write constraints.
Install Mechanism
No install spec or external downloads — instruction-only. Lowest install risk.
Credentials
The skill requests no environment variables, credentials, or config paths. That is appropriate and proportional for its stated functionality.
Persistence & Privilege
The skill requires writing persistent orchestration state and per-chapter files (explicitly intended). always:false and normal autonomous invocation are set. Persisting state to disk is necessary for the design but increases risk if the runtime allows writing outside a sandboxed task directory or if state contains sensitive data.
Assessment
This skill appears to do what it says (orchestrate multi-chapter documents) and doesn't request secrets or install code, but it intentionally writes persistent state and multiple files to disk. Before installing or using: 1) Confirm where {task-dir} maps on your system and ensure it is sandboxed and not a directory that contains secrets or system config. 2) Verify the runtime enforces file-write restrictions so the skill cannot write outside the intended task directory. 3) Be aware orchestration JSON may contain full document text; treat it as sensitive data and rotate/delete after use if needed. 4) Ensure the environment provides basic shell utilities (sed, grep, cat) or adapt the merge steps accordingly. 5) If you need stronger guarantees, request the skill be adapted to avoid persisting raw sensitive content or to encrypt state at rest. Overall this is internally coherent, but confirm filesystem and sub-agent isolation policies before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a0p36d2a0pwb80c0e4esqk98272ks
335downloads
0stars
1versions
Updated 7h ago
v2.0.0
MIT-0

Doc Orchestrator

Generate long, multi-chapter documents by coordinating sub-agents with a contract-first, serial-then-parallel strategy and persistent orchestration state.

When This Applies

  • Document has 3+ chapters/sections with cross-references
  • Total expected output > 500 lines
  • Multiple sections share definitions (names, enums, constants, values)

Core Principles

  1. Contract First — Define all shared definitions before delegating
  2. File Isolation — Each sub-agent writes to its own file; main agent merges
  3. State Persistence — Write orchestration state to JSON so context compaction can't break the workflow

Workflow

Phase 1 — Analyze Dependencies

Build a dependency graph. For each pair ask: "Does chapter B need chapter A's output?"

Classify:

  • Contract — defines shared values (main agent writes directly)
  • Serial — has upstream dependency (spawn after dependency completes)
  • Parallel — no unresolved dependencies (run concurrently)

Optimize: if multiple chapters depend only on the contract, they can run in parallel.

Phase 2 — Initialize State File

Create {task-dir}/{TASK-ID}-orchestration.json:

{
  "document": "Document Title",
  "contract_file": "TASK-XXX-contract.md",
  "final_file": "TASK-XXX-final.md",
  "chapters": {
    "ch1": {"title": "Overview", "status": "done", "file": "TASK-XXX-contract.md", "deps": []},
    "ch2": {"title": "Characters", "status": "pending", "file": "TASK-XXX-ch2.md", "deps": ["ch1"]},
    "ch3": {"title": "Abilities", "status": "pending", "file": "TASK-XXX-ch3.md", "deps": ["ch1"]},
    "ch4": {"title": "Factions", "status": "pending", "file": "TASK-XXX-ch4.md", "deps": ["ch1", "ch2"]}
  }
}

Status values: pending | running | done | failed

Update this file after every state change. After context compaction, read this file to restore full state.

Phase 3 — Write the Contract

Main agent writes all contract chapters directly. Include a Global Conventions table:

## Global Conventions
| Item        | Value       | Referenced by  |
|-------------|-------------|----------------|
| Score range | 1-5 integer | ch5 API, ch6   |

This is the single source of truth.

Phase 4 — Execute (Serial + Parallel)

For each chapter whose deps are all done:

  1. Update state: "status": "running"
  2. Spawn sub-agent with the prompt template (see below)
  3. On completion: update state to "done"; check what new chapters are unblocked
  4. On failure: update state to "failed"; decide retry or main-agent fallback

Spawn all unblocked chapters in parallel. Wait for serial dependencies.

After context compaction: read the orchestration JSON to recover state, then continue.

Phase 5 — Merge & Validate

Concatenate files in chapter order. During merge:

  1. Strip duplicate document titles — Sub-agents often repeat the top-level # Document Title. Remove all occurrences except the one in the contract file:

    # Remove duplicate H1 titles during merge (keep only from contract)
    cat contract.md > final.md
    for f in ch2.md ch3.md ... ; do
      sed '/^# Document Title$/d' "$f" >> final.md
    done
    
  2. Run consistency checks:

    grep -n "conflicting_value" final.md
    grep -o "'[a-z_]*'" final.md | sort | uniq
    
  3. Fix any issues before delivering.

Sub-Agent Prompt Template

## Task: Write [Chapter Title] for [Document Name]

**Read first:** `path/to/contract.md`
Pay attention to Global Conventions table (section X.X).

**Write to:** `path/to/output-chN.md` (new file, do NOT modify other files)

**IMPORTANT formatting rules:**
- Do NOT include the document title (# Document Title) — it belongs only in the contract
- Start your file directly with the chapter heading (## Chapter N: Title)
- Do NOT repeat definitions from the contract; reference them

### Content requirements:
[chapter-specific requirements]

### Constraints (must match contract):
- [constraint 1]
- [constraint 2]

Anti-Patterns

Don'tDo Instead
Rely on context memory for orchestration statePersist state to JSON file
Let sub-agents write to the same fileEach writes own file; main agent merges
Skip formatting rules in promptExplicitly say "no document title, start with ## chapter heading"
Assume sub-agents won't hit content filtersHave fallback: main agent writes sensitive chapters directly
Skip consistency check after mergeAlways grep for known conflict patterns
Use bigger model to brute-force long outputSmaller model + smaller task > bigger model + huge task
Poll sub-agents in a loopUse push-based completion (auto-announce)

Decision Flowchart

Document request received
  |
  +-- < 500 lines expected? --> Write directly (no orchestration)
  |
  +-- 500-1500 lines, no cross-refs? --> Simple parallel (each chapter = own file)
  |
  +-- > 500 lines WITH cross-references?
       |
       1. Analyze dependency graph
       2. Create orchestration state JSON
       3. Main agent writes contract chapters
       4. Serial chain for dependent chapters
       5. Parallel burst for independent chapters
       6. Merge + strip duplicate titles + validate
       7. Deliver

Lessons from Real Usage

Test 1: PRD (9 chapters, technical)

MetricNaive Parallel (v1)Contract-First (v2)
Output1,405 lines3,055 lines
ConsistencyScore 1-5 vs 1-10 conflictZero conflicts
File integrityChapters overwrittenAll preserved
Rework4 chapters rewrittenNone

Test 2: Worldbuilding Bible (7 chapters, creative writing)

MetricResult
Output2,170 lines
ConsistencyZero conflicts (names, factions, abilities all matched)
Issues hitContent filter blocked ch5 twice; ch6 output wrong chapter content
RecoveryMain agent wrote ch5 directly; ch6 retried successfully
Duplicate titles4 of 6 sub-agent files repeated doc title (fixed in merge)

Key Takeaways

  • Content filters: Sensitive topics (war, conflict) may trigger model safety filters in sub-agents. Fallback: main agent writes those chapters, or rephrase with softer language
  • Wrong output: Sub-agents occasionally output content for the wrong chapter. Always verify file content, not just file existence
  • Title duplication: Sub-agents copy the document title from the contract file. Prompt template now explicitly forbids this; merge step strips duplicates as safety net

Comments

Loading comments...