team-adversarial-swarm
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalyworkflows/wf-swarm-explore.js
LOWAnomalyLOW
workflows/wf-swarm-explore.js
No direct malware indicators (obfuscation, credential theft logic, network/file/process invocation) are present in this fragment. The main security exposure is a high-control-surface design: it interpolates untrusted inputs into agent prompts and instructs agents to perform evidence verification actions (potentially including reading files/grepping) while running two rounds of parallel agents without concurrency limits. If the underlying `agent()` implementation provides tool access, prompt injection or tool misuse could cause data exposure or incorrect validation, and large `assignments` can lead to resource exhaustion.
Confidence: 63%Severity: 62%
Audit Metadata