ClawAudit verdict
agent-orchestration
martin-agent-orchestration
The skill seems to be a genuine agent orchestration tool, providing a framework for managing sub-agents and prompts. No malicious behavior is detected.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. ClawAudit flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Permission integrity
network_out
Findings (3)
POSTs data to external URL
SKILL.md ยท code ยท .post(
"https://
Instructs covert action โ may act without user awareness
examples/active-agents.md ยท prose ยท downgraded ยท silently
Popular HTTP library โ network access
SKILL.md ยท prose ยท downgraded ยท Got
Permissions & capabilities
No declared permissions โ minimal attack surface.
network_outcredential_access Is this flag fair?
Thanks โ recorded.