The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches the '@claude-flow/plugin-agent-federation' package from the public npm registry using the npx tool.
[REMOTE_CODE_EXECUTION]: Executing code directly from a remote registry using npx with the @latest tag constitutes remote code execution. This practice is vulnerable to supply chain attacks if the package or registry is compromised.
[COMMAND_EXECUTION]: The skill uses the Bash tool to run commands that initialize the node and set compliance configurations.
[PROMPT_INJECTION]: The MODE variable derived from user input is directly interpolated into a shell command (npx ... --compliance MODE) without sanitization or boundary markers, allowing for potential command injection.
Ingestion points: User-supplied compliance mode argument in SKILL.md
Boundary markers: None
Capability inventory: Bash (npx)
Sanitization: None

federation-init