fix(SECUpdates): use direct WebFetch instead of agent spawning for source fetching#726
Closed
christauff wants to merge 1 commit intodanielmiessler:mainfrom
Closed
fix(SECUpdates): use direct WebFetch instead of agent spawning for source fetching#726christauff wants to merge 1 commit intodanielmiessler:mainfrom
christauff wants to merge 1 commit intodanielmiessler:mainfrom
Conversation
…urce fetching The SKILL.md Step 2 said "Launch parallel agents to fetch each source" which caused models to spawn Task subprocesses for what should be direct WebFetch calls. Agent spawning adds 10-15s overhead per source and can silently hang (observed 17-minute stall with zero output). Replace with direct parallel WebFetch guidance and add explicit anti-agent note to the workflow. Also adds risky.biz to SKILL.md Step 2 source table (was in sources list but missing from the fetching table). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Owner
|
Thank you @christauff for the fix! The SECUpdates SKILL.md was completely rewritten in v4.0 and no longer uses the agent-spawning pattern. The current v4.0 version already uses direct WebFetch calls, so this issue is resolved. See Releases/v4.0.3 for the latest. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Problem
The SECUpdates SKILL.md Step 2 says "Launch parallel agents to fetch each source" with an "Agent 1/2/3..." table. This causes Claude to spawn Task agents for what should be direct WebFetch calls. Agent spawning adds 10-15 seconds overhead per source (permission prompts, context building, subprocess startup) and can silently hang — we observed a 17-minute stall with zero visible output.
Fix
Replace agent language with direct WebFetch guidance and add an explicit implementation note. WebFetch is a direct tool call that returns in 2-5 seconds. Fetching 6 sources via direct WebFetch in two batches of 3 completes in under 15 seconds total vs. potentially unbounded with agents.
Test plan
🤖 Generated with Claude Code