Meta Control - Agent Orchestration
SuspiciousAudited by ClawScan on May 10, 2026.
Overview
This instruction-only skill is a review concern because it tells the agent to spawn background sub-agents that can crawl websites, run scripts, automate tasks, and monitor continuously without clear approval or stop limits.
Install only if you are comfortable with an agent coordinating other background agents. Before using it, ask for explicit confirmation before any sub-agent is spawned, before scripts or automation run, before websites are crawled, and before any long-running monitoring begins.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Sub-agents could keep working in the background or monitoring over time without the user seeing each action or knowing how to stop them.
The skill instructs the agent to spawn independent background sub-agents and includes a monitoring agent that can run continuously, without defining stop conditions, teardown, or user approval requirements.
用 sessions_spawn 开启子 Agent： - 独立会话，后台运行 ... | 监控 Agent | 持续监控、告警 |
Require explicit user approval before spawning sub-agents, set time limits and stop conditions, and provide a clear way to list and terminate background sessions.
A delegated sub-agent might run commands, automate actions, or crawl sites more broadly than the user intended.
The skill authorizes sub-agents to crawl websites and run scripts/automation, which are high-impact tool uses, but the artifacts do not define limits, safe defaults, or confirmation rules.
| 搜索 Agent | 查资料、爬网站 | | 执行 Agent | 跑脚本、自动化 |
Add clear scoping rules: require user confirmation for script execution, automation, crawling, account changes, file changes, and any irreversible or public-facing action.
Task details or user-provided information may be passed to sub-agents without clear boundaries.
The skill establishes a multi-agent communication flow where sub-agents report through the main agent, but it does not describe what data may be shared, how sub-agent identity is verified, or how sensitive task context is limited.
- 子 Agent → 我 → 你 - 我不打扰你，只在必要时汇总
Define what information can be shared with sub-agents, require user approval before sharing sensitive data, and label which sub-agent produced each result.