swarm-advanced
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation and execution of the
claude-flowframework from the npm registry, a well-known package service. - [COMMAND_EXECUTION]: The skill provides numerous examples of CLI usage and tool calls for system orchestration, including global package installation and automated task execution like running test suites.
- [PERSISTENCE]: The skill includes instructions for maintaining swarm state across sessions and creating local backups of agent memory stores, which is a standard feature for complex orchestration workflows.
- [INDIRECT_PROMPT_INJECTION]: The 'Research Swarm' architecture creates a surface for indirect prompt injection by ingesting untrusted data from web searches and academic databases. While it mentions roles for source validation and fact-checking, it lacks explicit technical instructions for using boundary markers or sanitizing the external content before it is processed by the agents.
Audit Metadata