agent-coordinator-swarm-init

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The code fragment represents a coherent, purpose-aligned coordination skill for swarm initialization with enforced in-memory coordination. It uses standard tooling (npx/claude-flow) to read/write status, progress, and completion across agents. There are no explicit credentials, hardcoded secrets, or direct data exfiltration mechanisms. The primary security considerations are: (1) dependency trust for claude-flow via npx (supply chain risk); (2) memory namespace exposure if access controls are lax; and (3) shell command execution patterns that could be risky if inputs influence commands in a broader context. Overall, the footprint is proportionate to its stated purpose but warrants access control, dependency pinning, and auditing of memory namespace permissions to reduce potential supply-chain and data-flow risks.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 04:33 PM
Package URL
pkg:socket/skills-sh/ruvnet%2Fruflo%2Fagent-coordinator-swarm-init%2F@aea8b900877531a94b3248a4d72db9e7a5da6dcc