swarm-init
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to execute instructions using
npx @claude-flow/cli@latest. This downloads external code dynamically from the npm registry at runtime. - [REMOTE_CODE_EXECUTION]: Executing unversioned third-party command-line utilities via
npxintroduces a remote code execution surface if the target package is untrusted, unverified, or subject to a supply-chain attack.
Audit Metadata