team-adversarial-swarm

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
workflows/wf-swarm-explore.js

No direct malware indicators (obfuscation, credential theft logic, network/file/process invocation) are present in this fragment. The main security exposure is a high-control-surface design: it interpolates untrusted inputs into agent prompts and instructs agents to perform evidence verification actions (potentially including reading files/grepping) while running two rounds of parallel agents without concurrency limits. If the underlying `agent()` implementation provides tool access, prompt injection or tool misuse could cause data exposure or incorrect validation, and large `assignments` can lead to resource exhaustion.

Confidence: 63%Severity: 62%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:14 AM
Package URL
pkg:socket/skills-sh/catlog22%2Fmaestro-flow%2Fteam-adversarial-swarm%2F@c41509afb4a0d99e9f7393a0ad32aa9c5f0b85e49b2910eadf0fac10f093cb69
Security Audit — socket — team-adversarial-swarm