hive-mind-advanced
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied objectives to orchestrate a swarm of specialized agents, creating a potential vector for indirect instructions.
- Ingestion points: The skill processes high-level objectives through commands like
npx claude-flow hive-mind spawn "<objective>"as seen in SKILL.md. - Boundary markers: The documentation does not specify the use of delimiters or instructions for agents to ignore embedded commands within the objective string.
- Capability inventory: The system possesses capabilities for shell command execution (via the
claude-flowCLI), local file system persistence using SQLite, and the ability to dynamically spawn multiple worker agents with different specializations. - Sanitization: No explicit mention of sanitization, filtering, or validation logic for the objective input is present in the skill instructions.
- [COMMAND_EXECUTION]: The skill relies on the execution of the
claude-flowtool through thenpxcommand to initialize the hive mind, spawn worker agents, and monitor system metrics. - [EXTERNAL_DOWNLOADS]: The skill references documentation and configuration resources located at
github.com/ruvnet/claude-flow. These references are categorized as vendor-related documentation links.
Audit Metadata