Skills
skills/ruvnet/claude-flow/swarm-init/Gen Agent Trust Hub

swarm-init

Warn

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download the @claude-flow/cli package from the public npm registry at runtime.
  • [REMOTE_CODE_EXECUTION]: By using npx package@latest, the skill executes remote code that is fetched and run immediately, which bypasses local version pinning and oversight.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to initialize swarm topologies and manage agent lifecycles, which can perform significant changes to the local development environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 01:22 PM
Security Audit — agent-trust-hub — swarm-init