Skillv1.0.0

ClawScan security

Agent Orchestration Multi Agent Optimize · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignFeb 11, 2026, 9:33 AM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: This is a high-level, instruction-only optimization guide for multi-agent orchestration; its requirements and instructions are coherent with its stated purpose and it does not request credentials, install code, or perform suspicious actions.
Guidance: This skill is a conceptual guide and illustrative snippets — it does not perform actions or request credentials. Before using it in production: (1) implement and review any concrete code carefully (the examples are incomplete), (2) run changes in staging with regression tests and rollback plans as the skill itself recommends, (3) avoid pasting secrets into any prompts derived from the skill, and (4) validate any model/service names and cost estimates against your actual providers and billing settings.

Purpose & Capability: okThe name/description (multi-agent optimization) matches the SKILL.md content: profiling, orchestration, cost and latency strategies, and example pseudocode. There are no unrelated requirements (no external credentials, binaries, or unexpected config paths).
Instruction Scope: okSKILL.md contains high-level guidance and illustrative Python snippets for profiling, orchestration, cost tracking, and monitoring. It does not instruct the agent to read arbitrary system files, access unrelated environment variables, call external endpoints, or exfiltrate data. Instructions are scoped to performance optimization tasks.
Install Mechanism: okNo install spec and no code files — lowest-risk, instruction-only skill. Nothing is downloaded or written to disk by the skill itself.
Credentials: okThe skill requests no environment variables, credentials, or config paths. The few referenced models and budgets in examples are illustrative and do not require secrets. No disproportionate access is requested.
Persistence & Privilege: okalways is false and the skill is user-invocable; it does not request permanent presence or ask to modify other skills or system-wide settings. Autonomous invocation (default) is not by itself concerning and is appropriate here.