Spawn Subagent

Spawn isolated subagents to handle long-running, complex, or blocking tasks without stalling the main session. Use when: a task will take more than 30 second...

This skill is an instruction guide for delegating work to subagents and appears to do what it claims, but be cautious: - Examples reference external CLIs (e.g., `gog`) and account env vars (GOG_ACCOUNT) that the skill metadata does not declare. Verify what platform binaries/CLIs your agent actually has and whether those tools require credentials. - The SKILL.md encourages referencing arbitrary file paths and env vars and demonstrates fetching emails/calendar events — these can expose sensitive data if a subagent is given broad access. Before using, confirm how your platform isolates subagents and what filesystem/env access they have. - Prefer explicit, minimal task descriptions: only include the exact paths and credentials the subagent truly needs; avoid embedding secrets in task text. - If you must run email/calendar tasks, ensure the provider credentials are scoped to least privilege and that subagents cannot exfiltrate results to unknown endpoints. What would reduce risk: the skill declaring required binaries/credentials (or noting none are needed), and explicit guidance on permission/isolation boundaries for subagents. If you can, test with non-sensitive sample data first.

Type: OpenClaw Skill Name: spawn-subagent Version: 1.0.1 The skill bundle provides documentation and usage patterns for a 'subagent spawning' capability, intended to delegate long-running tasks to isolated sessions. The instructions in SKILL.md and the deprecation notice in DEPRECATED.md focus on operational efficiency, error handling, and cost management, using legitimate examples such as file summarization and calendar/email management via CLI tools. No evidence of malicious intent, data exfiltration, or harmful prompt injection was identified.