swarmvault
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx -y @swarmvaultai/clito download and execute the vendor's command-line interface. This is the standard method for using the tool provided by the author. - [COMMAND_EXECUTION]: The agent is instructed to use shell commands (
swarmvaultornpx) to perform operations such as compiling the vault, linting, and querying. - [PROMPT_INJECTION]: The skill processes external data (PDFs, emails, URLs) through its ingestion and compilation workflows, which is an inherent feature of knowledge management tools.
- Ingestion points: External sources are added via
ingest_inputor by placing files in theraw/directory. - Boundary markers: No explicit instructions are provided to the agent to treat ingested data as untrusted or to ignore instructions contained within it.
- Capability inventory: The skill relies on file system access, shell execution, and network retrieval capabilities.
- Sanitization: There are no mentioned mechanisms for sanitizing or filtering instructions from ingested files during the compilation or query process.
Audit Metadata