← Back to Skills Marketplace
977
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install subagent-development
Description
Use when executing implementation plans with independent tasks in the current session
Usage Guidance
Before installing or running this skill, consider the following: (1) It expects to read and modify your repository (run tests, commit). Only enable it in a controlled environment (e.g., a sandbox repo, feature branch, or fork). (2) Ask where 'TodoWrite' and 'superpowers' integrations communicate and whether API tokens will be required; do not provide your main account tokens—use a dedicated, limited-permission service account if needed. (3) Require human-in-the-loop or restrict autonomous actions (prevent automatic commits or make subagents produce patches for manual review). (4) Audit commits made by any subagents and review their diffs before merging. (5) If you lack confidence about hidden endpoints or required credentials, test the skill locally with network access disabled or run it against a throwaway repository first. If you plan to grant git/CI credentials, grant least privilege and rotate tokens after testing.
Capability Analysis
Type: OpenClaw Skill
Name: subagent-development
Version: 1.0.0
The skill's core logic, as defined in SKILL.md and the prompt templates, appears benign, focusing on structured AI agent-driven software development and review processes. However, the `README.md` file contains an installation instruction (`npx add https://github.com/wpank/ai/tree/main/skills/meta/subagent-development`) that fetches and executes code directly from a remote GitHub URL. While a common installation pattern, this presents a significant supply chain vulnerability, as a compromise of the remote repository could lead to arbitrary code execution on the user's system during installation. This constitutes a risky capability without clear malicious intent within the skill's operational code itself, thus classifying it as suspicious.
Capability Assessment
Purpose & Capability
The name/description (subagent-driven development) match the instructions: orchestrating implementer/spec/quality-reviewer subagents to implement tasks, run tests, and commit changes. However, the skill expects access to a code workspace, git operations, and platform tooling (e.g., 'superpowers' tools and TodoWrite) while the registry metadata declares no required binaries, env vars, or config paths. That omission is notable but could be an omission rather than malicious intent.
Instruction Scope
SKILL.md and templates explicitly tell subagents to read plan files and implementation code, run tests, make commits, perform self-reviews, and 'Mark task complete in TodoWrite.' Those actions involve reading and modifying repository files and interacting with external services. The instructions do not include any steps that explicitly exfiltrate secrets, but they do give broad discretion to subagents to change code and call external platform services that are not fully specified.
Install Mechanism
Instruction-only skill with no install spec or downloaded code. That lowers disk/remote-install risk — nothing is pulled or executed by an install step.
Credentials
The skill declares no required environment variables or credentials, yet its workflow implies needing repo access (git credentials), and access to platform-specific services (TodoWrite and 'superpowers' tools). These credentials/configs are not listed in requires.env or required config paths, creating a mismatch that could hide necessary permissions or external endpoints the subagents will use.
Persistence & Privilege
always is false (normal). The skill relies on dispatching autonomous subagents to perform many automated actions (commits, tests, external notifications). Autonomous invocation is platform-default and not flagged by itself, but combined with the other concerns this means the agent could automatically make persistent changes unless you limit permissions or require human approval.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install subagent-development - After installation, invoke the skill by name or use
/subagent-development - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of subagent-driven-development skill.
- Establishes a workflow for executing implementation plans with independent tasks using a fresh subagent per task.
- Implements a two-stage review process: spec compliance review followed by code quality review for each task.
- Provides clear, step-by-step process diagrams and example workflow.
- Includes installation instructions and guidance on when to use this approach.
- Highlights advantages such as faster iteration, continuous progress, and built-in quality gates.
Metadata
Frequently Asked Questions
What is Subagent Development?
Use when executing implementation plans with independent tasks in the current session. It is an AI Agent Skill for Claude Code / OpenClaw, with 977 downloads so far.
How do I install Subagent Development?
Run "/install subagent-development" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Subagent Development free?
Yes, Subagent Development is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Subagent Development support?
Subagent Development is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Subagent Development?
It is built and maintained by wpank (@wpank); the current version is v1.0.0.
More Skills