flow-nexus-swarm
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to download and install the platform's core components via the Node Package Manager.
- Evidence: Instructions to run
npm install -g flow-nexus@latestand usenpx claude-flow@alphain the 'Integration' and 'Authentication' sections ofSKILL.md. - [REMOTE_CODE_EXECUTION]: The skill utilizes
npxto execute the Flow Nexus CLI and MCP server directly from the NPM registry. - Evidence: Command
claude mcp add flow-nexus npx flow-nexus@latest mcp startinSKILL.md. - [COMMAND_EXECUTION]: The skill makes extensive use of MCP tools to orchestrate swarm activities, including agent deployment and workflow step execution which may trigger system actions like building and deploying software.
- Evidence: Tools such as
mcp__flow-nexus__agent_spawnandmcp__flow-nexus__workflow_createdefine actions likebuild_appanddeploy_prodinSKILL.md. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it processes external input data through its workflow execution engine.
- Ingestion points: Data provided to the
input_dataparameter in themcp__flow-nexus__workflow_executetool withinSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the documentation.
- Capability inventory: The skill has broad capabilities including agent creation, task orchestration, and repository-level development tasks.
- Sanitization: The documentation does not specify sanitization procedures for the processed input data.
Audit Metadata