hive-mind-advanced
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs users to execute commands using the
npx claude-flowtool for initialization, monitoring, and agent orchestration. These instructions are standard for the described framework's operational workflow.- [EXTERNAL_DOWNLOADS]: The skill references theclaude-flowpackage on the NPM registry and provides documentation links to theruvnet/claude-flowrepository on GitHub. These are documented neutrally as resources from the framework's own infrastructure.- [INDIRECT_PROMPT_INJECTION]: The multi-agent architecture described in the skill creates a surface where worker agents ingest data from external sources, which could be exploited for indirect prompt injection. 1. Ingestion points: Worker agents such as researchers and reviewers process external repository content, pull requests, and research data as noted in the workflows documentation. 2. Boundary markers: The documentation does not specify implementation of markers or instructions to isolate untrusted data. 3. Capability inventory: The framework supports a variety of specialized agents with coding, analysis, and system design capabilities. 4. Sanitization: No explicit methods for input validation or data sanitization are mentioned in the provided guidance.- [NO_CODE]: The skill is composed entirely of markdown documentation and reference files, and it does not include any internal scripts, binaries, or executable code directly.
Audit Metadata