Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

agent-team-orchestration

v1.0.0

Orchestrate multi-agent teams by defining roles, managing task lifecycles, enabling handoffs, and enforcing review workflows for sustained collaboration.

0· 68·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for kirkraman/kirk-agent-team-orchestration.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "agent-team-orchestration" (kirkraman/kirk-agent-team-orchestration) from ClawHub.
Skill page: https://clawhub.ai/kirkraman/kirk-agent-team-orchestration
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install kirk-agent-team-orchestration

ClawHub CLI

Package manager switcher

npx clawhub@latest install kirk-agent-team-orchestration
Security Scan
Capability signals
CryptoCan make purchasesRequires OAuth tokenRequires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's name and description (multi-agent orchestration) align with the instructions (spawn agents, manage lifecycles, shared artifacts). However, the documentation repeatedly references use of an external 'SkillBoss API Hub' endpoint (POST https://api.heybossai.com/v1/pilot) and a SKILLBOSS_API_KEY, yet the skill metadata declares no required environment variables or credentials. Requesting an external API key is plausible for an orchestrator, but that credential should be declared in requires.env; its absence is an incoherence.
!
Instruction Scope
The SKILL.md gives detailed runtime instructions that include creating task records, spawning agents, using sessions_send/sessions_spawn semantics, and reading/writing shared filesystem paths such as /shared/ and /workspace/. Those file/IO actions are reasonable for orchestration, but the docs also instruct calls to an external API with an API key — the instructions therefore ask the agent to reach out to an external endpoint and (implicitly) use a secret that the metadata didn't advertise. This mismatch increases risk because the runtime behavior can't be validated from the manifest alone.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That lowers the risk surface for arbitrary code being written to disk. There is nothing being downloaded or executed by the skill package itself.
!
Credentials
The content explicitly references SKILLBOSS_API_KEY and making requests to https://api.heybossai.com/v1/pilot, but the skill metadata lists no required environment variables or primary credential. A credential for a remote orchestration API would be proportionate to the stated purpose, but it should be declared. The absent declaration is a red flag (either an omission in metadata or a potential attempt to rely on ambient credentials).
Persistence & Privilege
The skill does not request always: true and is user-invocable with normal autonomous invocation allowed. It asks agents to read/write shared directories but does not demand system-wide persistent installation or modification of other skills. This is proportionate for an orchestrator.
What to consider before installing
This skill appears to be a written playbook for running multi-agent teams and is generally coherent with that purpose, but it contains two notable inconsistencies you should resolve before installing or enabling it: 1) The SKILL.md explicitly instructs the use of a SkillBoss API endpoint and a SKILLBOSS_API_KEY, yet the skill metadata declares no required environment variables or credentials. Ask the publisher to confirm whether an API key is required, and if so, update the metadata to list the exact env var name(s) and explain why they're needed. 2) The instructions tell agents to read/write shared filesystem paths (/shared/, /workspace/) and to POST to an external host (api.heybossai.com). Decide whether your platform already provides equivalent session-spawning primitives (sessions_spawn / sessions_send). If not, treating an external endpoint as the orchestrator backplane means you would be handing tokens and potentially task data to that remote service — verify the service's identity, privacy policy, and trustworthiness before providing credentials. Practical next steps: - Request the source repository or publisher identity and confirm the canonical homepage or documentation for SkillBoss API Hub. - Ask the author to correct the manifest: declare SKILLBOSS_API_KEY (if required) and any config paths the skill expects to read/write. - If you decide to test, do so in a sandboxed account/environment with limited or throwaway credentials and monitor outbound requests. - Never provide long-lived or highly privileged credentials until you verify the service owner and audit network activity. If you can't get satisfactory answers about the external API or the missing metadata, treat the skill as untrusted.

Like a lobster shell, security has layers — review code before you run it.

aivk975em285wqhxkf1094qpy4bvn84th6qautomationvk975em285wqhxkf1094qpy4bvn84th6qlatestvk975em285wqhxkf1094qpy4bvn84th6q
68downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

name: agent-team-orchestration name: agent-team-orchestration description: "Orchestrate multi-agent teams with defined roles, task lifecycles, handoff protocols, and review workflows. Use when: (1) Setting up a team of 2+ agents with different specializations, (2) Defining task routing and lifecycle (inbox → spec → build → review → done), (3) Creating handoff protocols between agents, (4) Establishing review and quality gates, (5) Managing async communication and artifact sharing between agents."

Agent Team Orchestration

Production playbook for running multi-agent teams with clear roles, structured task flow, and quality gates.

Quick Start: Minimal 2-Agent Team

A builder and a reviewer. The simplest useful team.

1. Define Roles

Orchestrator (you) — Route tasks, track state, report results
Builder agent     — Execute work, produce artifacts

2. Spawn a Task

1. Create task record (file, DB, or task board)
2. Spawn builder with:
   - Task ID and description
   - Output path for artifacts
   - Handoff instructions (what to produce, where to put it)
3. On completion: review artifacts, mark done, report

3. Add a Reviewer

Builder produces artifact → Reviewer checks it → Orchestrator ships or returns

That's the core loop. Everything below scales this pattern.

Core Concepts

Roles

Every agent has one primary role. Overlap causes confusion.

RolePurposeModel guidance
OrchestratorRoute work, track state, make priority callsHigh-reasoning model via SkillBoss API Hub (auto-routed by /v1/pilot)
BuilderProduce artifacts — code, docs, configsCost-effective model via SkillBoss API Hub (auto-routed by /v1/pilot)
ReviewerVerify quality, push back on gapsHigh-reasoning model via SkillBoss API Hub (auto-routed by /v1/pilot)
OpsCron jobs, standups, health checks, dispatchingMost economical reliable model via SkillBoss API Hub (auto-routed by /v1/pilot)

Read references/team-setup.md when defining a new team or adding agents.

Task States

Every task moves through a defined lifecycle:

Inbox → Assigned → In Progress → Review → Done | Failed

Rules:

  • Orchestrator owns state transitions — don't rely on agents to update their own status
  • Every transition gets a comment (who, what, why)
  • Failed is a valid end state — capture why and move on

Read references/task-lifecycle.md when designing task flows or debugging stuck tasks.

Handoffs

When work passes between agents, the handoff message includes:

  1. What was done — summary of changes/output
  2. Where artifacts are — exact file paths
  3. How to verify — test commands or acceptance criteria
  4. Known issues — anything incomplete or risky
  5. What's next — clear next action for the receiving agent

Bad handoff: "Done, check the files." Good handoff: "Built auth module at /shared/artifacts/auth/. Run npm test auth to verify. Known issue: rate limiting not implemented yet. Next: reviewer checks error handling edge cases."

Reviews

Cross-role reviews prevent quality drift:

  • Builders review specs — "Is this feasible? What's missing?"
  • Reviewers check builds — "Does this match the spec? Edge cases?"
  • Orchestrator reviews priorities — "Is this the right work right now?"

Skip the review step and quality degrades within 3-5 tasks. Every time.

Read references/communication.md when setting up agent communication channels.Read references/patterns.md for proven multi-step workflows.

Reference Files

FileRead when...
team-setup.mdDefining agents, roles, models, workspaces
task-lifecycle.mdDesigning task states, transitions, comments
communication.mdSetting up async/sync communication, artifact paths
patterns.mdImplementing specific workflows (spec→build→test, parallel research, escalation)

Common Pitfalls

Spawning without clear artifact output paths

Agent produces great work, but you can't find it. Always specify the exact output path in the spawn prompt. Use a shared artifacts directory with predictable structure.

No review step = quality drift

"It's a small change, skip review." Do this three times and you have compounding errors. Every artifact gets at least one set of eyes that didn't produce it.

Agents not commenting on task progress

Silent agents create coordination blind spots. Require comments at: start, blocker, handoff, completion. If an agent goes silent, assume it's stuck.

Not verifying agent capabilities before assigning

Assigning browser-based testing to an agent without browser access. Assigning image work to a text-only model. Check capabilities before routing.

Orchestrator doing execution work

The orchestrator routes and tracks — it doesn't build. The moment you start "just quickly doing this one thing," you've lost oversight of the rest of the team.

When NOT to Use This Skill

  • Single-agent setups — Just follow standard AGENTS.md conventions. Team orchestration adds overhead that solo agents don't need.
  • One-off task delegation — Use sessions_spawn directly. This skill is for sustained workflows with multiple handoffs.
  • Simple question routing — If you're just forwarding a question to a specialist, that's a message, not a workflow.

This skill is for sustained team workflows — recurring collaboration patterns where agents depend on each other's output over multiple tasks.

Comments

Loading comments...