Master Agent Workflow Global

支持跨平台的一键安装全局主控代理工作流，具备多级代理调度、错误处理、配置迁移和模板管理能力。

This package appears to be what it claims (a global OpenClaw master-agent workflow), but review a few risky spots before installing: 1) Inspect hooks/openclaw/handler.js (or request the full generateExecutionCommand implementation) — the handler builds a command string from free-form task text and returns it; ensure the platform will not execute unsanitized shell lines or allow command injection. 2) The installer and activator modify ~/.openclaw/config.json and append to your shell rc (adds MAW_HOME and aliases); back up those files first. 3) The docs contain examples that use curl | bash from an external site — never run curl|bash on unfamiliar URLs; prefer installing from local package files or from a trusted registry. 4) Check what data is exported/imported by the migrate/backup tools (they include config, templates, logs) so you do not accidentally include sensitive data in backups. 5) Run the install/activation first in a sandbox or test account, and examine the created scripts (especially any maw.sh or execution wrappers) before enabling on production. If you want, I can (a) point out exact locations in handler.js to review for sanitization, (b) search for generateExecutionCommand in the truncated portion and analyze it, or (c) produce a safe checklist for manual installation/rollback.

Type: OpenClaw Skill Name: master-agent-workflow-global Version: 2.0.0 The skill bundle is a legitimate workflow management tool for OpenClaw, providing parallel task execution and agent hierarchy. The included scripts (install.sh, activator.sh, migrate.sh) and the Node.js hook handler (handler.js) perform standard administrative tasks such as directory creation, configuration management, and command parsing. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the behavior is consistent with the stated purpose of providing a global, migratable master-agent workflow.