← 返回 Skills 市场
Multi-Agent Coordinator
作者
michealxie001
· GitHub ↗
· v0.1.0
· MIT-0
170
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install multi-agent
功能描述
Production-ready multi-agent orchestration system for OpenClaw. Implements Coordinator Mode with real parallel worker spawning via sessions_spawn, XML task n...
安全使用建议
This skill is functionally coherent with a multi-agent orchestrator, but take precautions before running it:
- Expect to need the OpenClaw CLI (or equivalent) in PATH: the scripts call subprocess commands like 'openclaw sessions spawn' though the registry metadata claims no required binaries; install and verify the OpenClaw CLI you plan to use first.
- The SKILL.md and code are inconsistent about spawn commands (SKILL.md shows 'sessions_spawn' while code uses 'openclaw sessions spawn'); verify the correct invocation for your environment.
- Spawned workers are explicitly allowed to run file operations, shell commands, and web fetches and are instructed to include concrete file paths and code snippets in outputs — run this skill only in an isolated/sandbox workspace without secrets or sensitive files.
- Review the worker prompt templates and scripts (coordinator_v2.py, coordinator_phase2.py, worker.py) to confirm they do not exfiltrate data to external endpoints you don’t control. The package itself does not contain external network endpoints, but worker prompts could instruct sub-agents to perform web requests.
- Test in a disposable environment first (empty repo, no credentials), and inspect .openclaw/scratchpad after runs. If you need to use in production, consider adding explicit restrictions/sandboxing on spawned workers and ensure the OpenClaw CLI you trust is used.
If you want, I can list the exact lines where subprocess calls are made and point out the files/sections that should be reviewed or edited before use.
功能分析
Type: OpenClaw Skill
Name: multi-agent
Version: 0.1.0
The skill bundle implements a multi-agent orchestration system that allows a coordinator agent to spawn and manage worker agents. The system includes scripts (scripts/worker.py, scripts/coordinator_phase2.py) that utilize subprocess.run with shell=True to execute arbitrary bash commands and OpenClaw CLI tools. While these high-risk capabilities are aligned with the stated purpose of a parallel execution framework, the lack of input sanitization and the inherent risks of shell execution make the bundle vulnerable to command injection. No evidence of intentional malice, such as data exfiltration or unauthorized persistence, was found.
能力评估
Purpose & Capability
Name/description match the code: the package implements a Coordinator and workers and uses a four‑phase workflow. However the code calls an external 'openclaw' CLI (and SKILL.md shows a 'sessions_spawn' command), yet the registry metadata declares no required binaries. The coordinator also creates prompts that instruct spawned workers to use powerful tools (read/edit/bash/web_search), which is coherent with orchestration but should have been declared as a runtime dependency/requirement.
Instruction Scope
SKILL.md and scripts instruct the agent to prepare prompts, spawn real workers, and process XML notifications; the worker prompts explicitly tell workers to use file operations, bash, web_fetch, etc., and to include exact file paths and code snippets in results. That means spawned workers can read and modify repository files and potentially any files accessible to the agent. The instructions also expect collecting and parsing arbitrary XML outputs from workers. The scope is broad and includes actions (file read/write, shell/subprocess invocation, network fetch) that go beyond simple orchestration; this is intended for the feature but increases risk and should be verified.
Install Mechanism
There is no install spec (instruction-only), so nothing is downloaded automatically. That is lower risk. But the code invokes subprocesses calling an 'openclaw' CLI (and SKILL.md suggests a 'sessions_spawn' tool) which is not declared as a required binary — an undeclared external dependency. No remote archives or installers are present in the package.
Credentials
The skill declares no required environment variables or credentials, which superficially looks minimal. In practice it spawns workers that are instructed to use powerful tools (file I/O, bash, web_fetch, web_search) and persist state under .openclaw/scratchpad. That means sensitive local data (secrets, config files) may be exposed to spawned workers. Also the 'openclaw' CLI the scripts call may require credentials or an environment the package doesn't declare. The lack of declared credentials is not malicious, but the combination of undeclared CLI dependency and broad worker tool access is disproportionate if you expected a lightweight coordinator.
Persistence & Privilege
The skill persists state to .openclaw/scratchpad and coordinator_state.json (expected for an orchestrator) and does not set always:true. It does not appear to modify other skills or global agent settings. Still, persistence of worker prompts/results to the filesystem means sensitive outputs will remain on disk and should be monitored/cleared as needed.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install multi-agent - 安装完成后，直接呼叫该 Skill 的名称或使用
/multi-agent触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release: Production-ready coordinator mode with four-phase workflow (Research → Synthesis → Implementation → Verification), real parallel worker spawning via sessions_spawn, XML task notifications, and state persistence.
元数据
常见问题
Multi-Agent Coordinator 是什么？
Production-ready multi-agent orchestration system for OpenClaw. Implements Coordinator Mode with real parallel worker spawning via sessions_spawn, XML task n... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 170 次。
如何安装 Multi-Agent Coordinator？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install multi-agent」即可一键安装，无需额外配置。
Multi-Agent Coordinator 是免费的吗？
是的，Multi-Agent Coordinator 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Multi-Agent Coordinator 支持哪些平台？
Multi-Agent Coordinator 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Multi-Agent Coordinator？
由 michealxie001（@michealxie001）开发并维护，当前版本 v0.1.0。
推荐 Skills