swarm-advanced
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the global installation of the
claude-flowtool usingnpm install -g claude-flow@alpha. This is a core dependency for the skill's functionality. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its design for processing externally sourced data.
- Ingestion points: Data is ingested from external research sources and testing results via tools like
mcp__claude-flow__memory_usage(SKILL.md) andmcp__claude-flow__parallel_execute(SKILL.md). - Boundary markers: The provided examples do not use delimiters or instructions to prevent the agent from interpreting embedded commands in processed data.
- Capability inventory: The skill has powerful capabilities, including shell command execution through
mcp__claude-flow__parallel_executeand workflow management viamcp__claude-flow__task_orchestrate. - Sanitization: No sanitization, validation, or escaping of ingested data is demonstrated in the orchestration patterns.
Audit Metadata