hiclaw-multi-agent-orchestration

SUSPICIOUS. The skill’s capabilities broadly match its stated orchestration purpose, and the main installer appears to be official to the HiClaw/Higress project, so this is not confirmed malware. Risk is driven by raw remote installer execution, credential forwarding into the platform/gateway, third-party npx MCP servers, and especially transitive skill installation from external registries like skills.sh/custom Nacos sources.