swarm-advanced

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the installation and execution of the claude-flow framework from the npm registry, a well-known package service.
  • [COMMAND_EXECUTION]: The skill provides numerous examples of CLI usage and tool calls for system orchestration, including global package installation and automated task execution like running test suites.
  • [PERSISTENCE]: The skill includes instructions for maintaining swarm state across sessions and creating local backups of agent memory stores, which is a standard feature for complex orchestration workflows.
  • [INDIRECT_PROMPT_INJECTION]: The 'Research Swarm' architecture creates a surface for indirect prompt injection by ingesting untrusted data from web searches and academic databases. While it mentions roles for source validation and fact-checking, it lacks explicit technical instructions for using boundary markers or sanitizing the external content before it is processed by the agents.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 09:16 AM