← Back to Skills Marketplace
OpenClaw Agent Orchestrator
by
Matthew Murphy
· GitHub ↗
· v0.6.0
419
Downloads
0
Stars
2
Active Installs
2
Versions
Install in OpenClaw
/install openclaw-agent-orchestrator
Description
Create and repair durable OpenClaw agents, bindings, and runtime state. Use when the user wants real subagents, durable agent entries, or proof that orchestr...
Usage Guidance
This skill appears to do what it claims, but it will modify your local OpenClaw workspaces and call the openclaw CLI. Before using it: (1) ensure the openclaw CLI is installed and you understand its permissions; (2) back up any existing workspace you care about because create-agent.sh will remove an existing target workspace for the agent-id; (3) confirm OPENCLAW_HOME if you don't want ~/.openclaw used; (4) run scripts/verify-runtime.sh first to inspect current state; and (5) review the scripts yourself (they are short and included) before granting the agent permission to run them.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-agent-orchestrator
Version: 0.6.0
The skill bundle contains a path traversal vulnerability in `scripts/create-agent.sh`. The script uses `shutil.rmtree()` on a target directory path constructed directly from the `AGENT_ID` argument without sanitization, which could allow for the deletion of arbitrary directories if the agent is manipulated into using a malicious ID (e.g., `../../`). While the instructions in `SKILL.md` and the logic in `scripts/verify-runtime.sh` appear aligned with the stated purpose of agent orchestration, the lack of input validation on destructive file operations is a significant security risk.
Capability Assessment
Purpose & Capability
Name/description match the actual behavior: the SKILL.md and included scripts use the openclaw CLI and local workspace copies to create and verify durable agents. No unrelated binaries, environment variables, or external services are required.
Instruction Scope
Instructions are narrowly scoped to verifying runtime state and creating agent workspaces via the provided scripts and openclaw CLI. One important behavior to note: scripts/create-agent.sh will delete (shutil.rmtree) any existing target workspace for the agent ID before copying the source workspace — this is consistent with 'create/refresh workspace' semantics but is destructive to any existing workspace at ~/.openclaw/workspaces/<agent-id> (or whatever OPENCLAW_HOME you set).
Install Mechanism
No install spec is present (instruction-only). The skill does not download or install code from external URLs; all code is included in the package.
Credentials
The skill requests no credentials or special environment variables. It uses OPENCLAW_HOME (defaulting to $HOME/.openclaw) which is reasonable for workspace location. No unrelated secrets or config paths are required.
Persistence & Privilege
The skill writes and deletes files under the user's OpenClaw workspace directory (e.g., ~/.openclaw/workspaces/<agent-id>) and calls the openclaw CLI to add agents and set identity. This is expected for an orchestrator but is persistent and can be destructive to existing workspaces for a given agent ID.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-agent-orchestrator - After installation, invoke the skill by name or use
/openclaw-agent-orchestrator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.6.0
# openclaw-agent-orchestrator 0.6.0 - Added ClawHub card emoji metadata. - No behavior change; this is a presentation and registry metadata update.
v0.5.0
# openclaw-agent-orchestrator 0.5.0 - First public release. - Adds verified durable-agent creation and runtime verification flows for OpenClaw. - Prefers `openclaw agents add` over misleading `sessions_spawn` narratives for durable agent provisioning.
Metadata
Frequently Asked Questions
What is OpenClaw Agent Orchestrator?
Create and repair durable OpenClaw agents, bindings, and runtime state. Use when the user wants real subagents, durable agent entries, or proof that orchestr... It is an AI Agent Skill for Claude Code / OpenClaw, with 419 downloads so far.
How do I install OpenClaw Agent Orchestrator?
Run "/install openclaw-agent-orchestrator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw Agent Orchestrator free?
Yes, OpenClaw Agent Orchestrator is completely free (open-source). You can download, install and use it at no cost.
Which platforms does OpenClaw Agent Orchestrator support?
OpenClaw Agent Orchestrator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw Agent Orchestrator?
It is built and maintained by Matthew Murphy (@matthewxmurphy); the current version is v0.6.0.
More Skills