hive-mind-advanced

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied objectives to orchestrate a swarm of specialized agents, creating a potential vector for indirect instructions.
  • Ingestion points: The skill processes high-level objectives through commands like npx claude-flow hive-mind spawn "<objective>" as seen in SKILL.md.
  • Boundary markers: The documentation does not specify the use of delimiters or instructions for agents to ignore embedded commands within the objective string.
  • Capability inventory: The system possesses capabilities for shell command execution (via the claude-flow CLI), local file system persistence using SQLite, and the ability to dynamically spawn multiple worker agents with different specializations.
  • Sanitization: No explicit mention of sanitization, filtering, or validation logic for the objective input is present in the skill instructions.
  • [COMMAND_EXECUTION]: The skill relies on the execution of the claude-flow tool through the npx command to initialize the hive mind, spawn worker agents, and monitor system metrics.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration resources located at github.com/ruvnet/claude-flow. These references are categorized as vendor-related documentation links.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 09:15 AM