{"data":{"skill":{"slug":"ruvnet-swarm-advanced","name":"swarm-advanced","icon":"📦","repo":"https://github.com/ruvnet/claude-flow/tree/main/.claude/skills/swarm-advanced","status":"approved","author":"ruvnet","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"caa24bdb-3def-4363-9432-5240e4312710","skill_id":"5f42899c-e4ea-4b51-a2ad-63538db1e852","version":8,"content_hash":"v3:ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006:562445160f552fd634538224b01528b009c4d59362fc29826fd51722d0ab4927:65747ae793ef9dde1d579bbb25d32858104b5c4f649b74cf47b41eb3b04aeb55:736b696c6c732f7275766e65742f737761726d2d616476616e636564:f14329ec2f600c18132b348a8b49c6a9","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Most alerts are false positives caused by Markdown fences, inline names, documentation links, and ordinary guidance. Four findings are confirmed because examples execute community npm packages through global installation or unversioned npx commands. No prompt injection, exfiltration intent, or malicious behavior was found.","remediation":[{"issue":"The prerequisite globally installs a prerelease package and registers it as an MCP server.","severity":"medium","suggestion":"Pin an audited release by exact version, prefer a project-local installation, and require confirmation before registration or lifecycle script execution."},{"issue":"CLI fallbacks use npx without an exact package version and can create persistent output.","severity":"medium","suggestion":"Add exact versions, describe expected file changes, and require user approval before package download, execution, or filesystem modification."}],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":20,"line_start":14},{"file":"SKILL.md","line_end":23,"line_start":20},{"file":"SKILL.md","line_end":32,"line_start":23},{"file":"SKILL.md","line_end":71,"line_start":32},{"file":"SKILL.md","line_end":116,"line_start":71},{"file":"SKILL.md","line_end":121,"line_start":116},{"file":"SKILL.md","line_end":152,"line_start":121},{"file":"SKILL.md","line_end":155,"line_start":152},{"file":"SKILL.md","line_end":179,"line_start":155},{"file":"SKILL.md","line_end":182,"line_start":179},{"file":"SKILL.md","line_end":209,"line_start":182},{"file":"SKILL.md","line_end":212,"line_start":209},{"file":"SKILL.md","line_end":235,"line_start":212},{"file":"SKILL.md","line_end":238,"line_start":235},{"file":"SKILL.md","line_end":246,"line_start":238},{"file":"SKILL.md","line_end":254,"line_start":246},{"file":"SKILL.md","line_end":283,"line_start":254},{"file":"SKILL.md","line_end":288,"line_start":283},{"file":"SKILL.md","line_end":304,"line_start":288},{"file":"SKILL.md","line_end":307,"line_start":304},{"file":"SKILL.md","line_end":339,"line_start":307},{"file":"SKILL.md","line_end":342,"line_start":339},{"file":"SKILL.md","line_end":359,"line_start":342},{"file":"SKILL.md","line_end":362,"line_start":359},{"file":"SKILL.md","line_end":379,"line_start":362},{"file":"SKILL.md","line_end":382,"line_start":379},{"file":"SKILL.md","line_end":389,"line_start":382},{"file":"SKILL.md","line_end":397,"line_start":389},{"file":"SKILL.md","line_end":453,"line_start":397},{"file":"SKILL.md","line_end":458,"line_start":453},{"file":"SKILL.md","line_end":488,"line_start":458},{"file":"SKILL.md","line_end":491,"line_start":488},{"file":"SKILL.md","line_end":528,"line_start":491},{"file":"SKILL.md","line_end":531,"line_start":528},{"file":"SKILL.md","line_end":553,"line_start":531},{"file":"SKILL.md","line_end":556,"line_start":553},{"file":"SKILL.md","line_end":579,"line_start":556},{"file":"SKILL.md","line_end":582,"line_start":579},{"file":"SKILL.md","line_end":589,"line_start":582},{"file":"SKILL.md","line_end":597,"line_start":589},{"file":"SKILL.md","line_end":642,"line_start":597},{"file":"SKILL.md","line_end":645,"line_start":642},{"file":"SKILL.md","line_end":666,"line_start":645},{"file":"SKILL.md","line_end":672,"line_start":666},{"file":"SKILL.md","line_end":703,"line_start":672},{"file":"SKILL.md","line_end":707,"line_start":703},{"file":"SKILL.md","line_end":733,"line_start":707},{"file":"SKILL.md","line_end":737,"line_start":733},{"file":"SKILL.md","line_end":760,"line_start":737},{"file":"SKILL.md","line_end":764,"line_start":760}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":960,"line_start":960},{"file":"SKILL.md","line_end":961,"line_start":961},{"file":"SKILL.md","line_end":962,"line_start":962},{"file":"SKILL.md","line_end":963,"line_start":963}]}],"critical_findings":[],"high_findings":[],"medium_findings":[{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":20,"line_start":14}],"confidence":0.98,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The prerequisite runs a prerelease npm package globally and registers it through npx as an MCP server. Installation can execute lifecycle code and alter the host."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":246,"line_start":238}],"confidence":0.96,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fallback invokes npx claude-flow without an exact version and writes research-report.md. This can download package code, execute it, and modify the filesystem."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":389,"line_start":382}],"confidence":0.96,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fallback invokes npx claude-flow without an exact version and requests SQLite output. This can download and execute package code with persistent filesystem effects."},{"title":"Ruby/shell backtick execution","locations":[{"file":"SKILL.md","line_end":589,"line_start":582}],"confidence":0.96,"description":"```bash","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The fallback invokes npx claude-flow without an exact version to run a testing swarm. This can download and execute package code on the host."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":1,"total_lines":971,"audit_model":"codex","audited_at":"2026-07-23T19:33:37.688+00:00","created_at":"2026-07-26T00:11:53.885293+00:00","static_findings":[{"id":"external_commands:SKILL.md:14:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":20,"severity":"medium","line_start":14},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":23,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":32,"severity":"medium","line_start":23},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":71,"severity":"medium","line_start":32},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":116,"severity":"medium","line_start":71},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":121,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":152,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:152:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":155,"severity":"medium","line_start":152},{"id":"external_commands:SKILL.md:155:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":179,"severity":"medium","line_start":155},{"id":"external_commands:SKILL.md:179:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":182,"severity":"medium","line_start":179},{"id":"external_commands:SKILL.md:182:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":209,"severity":"medium","line_start":182},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":212,"severity":"medium","line_start":209},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":235,"severity":"medium","line_start":212},{"id":"external_commands:SKILL.md:235:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":238,"severity":"medium","line_start":235},{"id":"external_commands:SKILL.md:238:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":246,"severity":"medium","line_start":238},{"id":"external_commands:SKILL.md:246:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":254,"severity":"medium","line_start":246},{"id":"external_commands:SKILL.md:254:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":283,"severity":"medium","line_start":254},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":288,"severity":"medium","line_start":283},{"id":"external_commands:SKILL.md:288:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":304,"severity":"medium","line_start":288},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":307,"severity":"medium","line_start":304},{"id":"external_commands:SKILL.md:307:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":339,"severity":"medium","line_start":307},{"id":"external_commands:SKILL.md:339:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":342,"severity":"medium","line_start":339},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":359,"severity":"medium","line_start":342},{"id":"external_commands:SKILL.md:359:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":362,"severity":"medium","line_start":359},{"id":"external_commands:SKILL.md:362:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":379,"severity":"medium","line_start":362},{"id":"external_commands:SKILL.md:379:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":382,"severity":"medium","line_start":379},{"id":"external_commands:SKILL.md:382:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":389,"severity":"medium","line_start":382},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":397,"severity":"medium","line_start":389},{"id":"external_commands:SKILL.md:397:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":453,"severity":"medium","line_start":397},{"id":"external_commands:SKILL.md:453:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":458,"severity":"medium","line_start":453},{"id":"external_commands:SKILL.md:458:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":488,"severity":"medium","line_start":458},{"id":"external_commands:SKILL.md:488:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":491,"severity":"medium","line_start":488},{"id":"external_commands:SKILL.md:491:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":528,"severity":"medium","line_start":491},{"id":"external_commands:SKILL.md:528:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":531,"severity":"medium","line_start":528},{"id":"external_commands:SKILL.md:531:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":553,"severity":"medium","line_start":531},{"id":"external_commands:SKILL.md:553:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":556,"severity":"medium","line_start":553},{"id":"external_commands:SKILL.md:556:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":579,"severity":"medium","line_start":556},{"id":"external_commands:SKILL.md:579:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":582,"severity":"medium","line_start":579},{"id":"external_commands:SKILL.md:582:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":589,"severity":"medium","line_start":582},{"id":"external_commands:SKILL.md:589:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":597,"severity":"medium","line_start":589},{"id":"external_commands:SKILL.md:597:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":642,"severity":"medium","line_start":597},{"id":"external_commands:SKILL.md:642:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":645,"severity":"medium","line_start":642},{"id":"external_commands:SKILL.md:645:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":666,"severity":"medium","line_start":645},{"id":"external_commands:SKILL.md:666:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":672,"severity":"medium","line_start":666},{"id":"external_commands:SKILL.md:672:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":703,"severity":"medium","line_start":672},{"id":"external_commands:SKILL.md:703:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":707,"severity":"medium","line_start":703},{"id":"external_commands:SKILL.md:707:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":733,"severity":"medium","line_start":707},{"id":"external_commands:SKILL.md:733:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":737,"severity":"medium","line_start":733},{"id":"external_commands:SKILL.md:737:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":760,"severity":"medium","line_start":737},{"id":"external_commands:SKILL.md:760:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":764,"severity":"medium","line_start":760},{"id":"external_commands:SKILL.md:764:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":798,"severity":"medium","line_start":764},{"id":"external_commands:SKILL.md:798:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":802,"severity":"medium","line_start":798},{"id":"external_commands:SKILL.md:802:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":824,"severity":"medium","line_start":802},{"id":"external_commands:SKILL.md:824:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":828,"severity":"medium","line_start":824},{"id":"external_commands:SKILL.md:828:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":855,"severity":"medium","line_start":828},{"id":"external_commands:SKILL.md:855:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":904,"severity":"medium","line_start":855},{"id":"external_commands:SKILL.md:904:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":909,"severity":"medium","line_start":904},{"id":"external_commands:SKILL.md:909:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":912,"severity":"medium","line_start":909},{"id":"external_commands:SKILL.md:912:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":917,"severity":"medium","line_start":912},{"id":"external_commands:SKILL.md:917:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":920,"severity":"medium","line_start":917},{"id":"external_commands:SKILL.md:920:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":925,"severity":"medium","line_start":920},{"id":"external_commands:SKILL.md:925:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":928,"severity":"medium","line_start":925},{"id":"external_commands:SKILL.md:928:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```javascript","category":"external_commands","line_end":933,"severity":"medium","line_start":928},{"id":"external_commands:SKILL.md:933:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":953,"severity":"medium","line_start":933},{"id":"external_commands:SKILL.md:953:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `sparc-methodology` - Systematic development workflow","category":"external_commands","line_end":954,"severity":"medium","line_start":953},{"id":"external_commands:SKILL.md:954:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `github-integration` - Repository management and automation","category":"external_commands","line_end":955,"severity":"medium","line_start":954},{"id":"external_commands:SKILL.md:955:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `neural-patterns` - AI-powered coordination optimization","category":"external_commands","line_end":956,"severity":"medium","line_start":955},{"id":"network:SKILL.md:960:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Claude Flow Documentation](https://github.com/ruvnet/claude-flow)","category":"network","line_end":960,"severity":"low","line_start":960},{"id":"network:SKILL.md:961:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Swarm Orchestration Guide](https://github.com/ruvnet/claude-flow/wiki/swarm)","category":"network","line_end":961,"severity":"low","line_start":961},{"id":"network:SKILL.md:962:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [MCP Tools Reference](https://github.com/ruvnet/claude-flow/wiki/mcp)","category":"network","line_end":962,"severity":"low","line_start":962},{"id":"network:SKILL.md:963:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Performance Optimization](https://github.com/ruvnet/claude-flow/wiki/performance)","category":"network","line_end":963,"severity":"low","line_start":963},{"id":"blocker:SKILL.md:869:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Avoid overlapping responsibilities","category":"blocker","line_end":869,"severity":"low","line_start":869}],"finding_verdicts":[{"id":"external_commands:SKILL.md:14:ruby-shell-backtick-execution","reason":"The prerequisite runs a prerelease npm package globally and registers it through npx as an MCP server. Installation can execute lifecycle code and alter the host.","verdict":"confirmed","severity":"medium","confidence":0.98},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:23:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:32:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:71:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:152:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:155:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:179:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:182:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:209:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:235:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:238:ruby-shell-backtick-execution","reason":"The fallback invokes npx claude-flow without an exact version and writes research-report.md. This can download package code, execute it, and modify the filesystem.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"external_commands:SKILL.md:246:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:254:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:283:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:288:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:307:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:339:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:359:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:362:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:379:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:382:ruby-shell-backtick-execution","reason":"The fallback invokes npx claude-flow without an exact version and requests SQLite output. This can download and execute package code with persistent filesystem effects.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:397:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:453:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:458:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:488:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:491:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:528:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:531:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:553:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:556:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:579:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:582:ruby-shell-backtick-execution","reason":"The fallback invokes npx claude-flow without an exact version to run a testing swarm. This can download and execute package code on the host.","verdict":"confirmed","severity":"medium","confidence":0.96},{"id":"external_commands:SKILL.md:589:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:597:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:642:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:645:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:666:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:672:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:703:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:707:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:733:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:737:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:760:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:764:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:798:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:802:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:824:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:828:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:855:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:904:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:909:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:912:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:917:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:920:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:925:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:928:ruby-shell-backtick-execution","reason":"This is a Markdown JavaScript fence introducing illustrative MCP calls, not Ruby or shell backtick execution. No executable backtick expression appears at this location.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:933:ruby-shell-backtick-execution","reason":"This is a Markdown closing fence, not executable Ruby or shell syntax. It has no command execution behavior.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:953:ruby-shell-backtick-execution","reason":"The backticks only format a related skill name in Markdown. They do not execute a command or interpolate shell input.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:954:ruby-shell-backtick-execution","reason":"The backticks only format a related skill name in Markdown. They do not execute a command or interpolate shell input.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:955:ruby-shell-backtick-execution","reason":"The backticks only format a related skill name in Markdown. They do not execute a command or interpolate shell input.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:960:hardcoded-url","reason":"This is a visible documentation link to the author's GitHub project or wiki. The skill does not fetch the URL or transmit data to it.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:961:hardcoded-url","reason":"This is a visible documentation link to the author's GitHub project or wiki. The skill does not fetch the URL or transmit data to it.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:962:hardcoded-url","reason":"This is a visible documentation link to the author's GitHub project or wiki. The skill does not fetch the URL or transmit data to it.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:963:hardcoded-url","reason":"This is a visible documentation link to the author's GitHub project or wiki. The skill does not fetch the URL or transmit data to it.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:869:system-reconnaissance","reason":"The text advises distinct agent responsibilities. It does not collect host, user, network, process, or environment information.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[],"subject_marketplace_commit_sha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","subject_content_hash":"562445160f552fd634538224b01528b009c4d59362fc29826fd51722d0ab4927","subject_tree_hash":"65747ae793ef9dde1d579bbb25d32858104b5c4f649b74cf47b41eb3b04aeb55","subject_plugin_path":"skills/ruvnet/swarm-advanced","audit_payload_hash":"f14329ec2f600c18132b348a8b49c6a9","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","contentHash":"562445160f552fd634538224b01528b009c4d59362fc29826fd51722d0ab4927","treeHash":"65747ae793ef9dde1d579bbb25d32858104b5c4f649b74cf47b41eb3b04aeb55","pluginPath":"skills/ruvnet/swarm-advanced","auditPayloadHash":"f14329ec2f600c18132b348a8b49c6a9"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/ruvnet-swarm-advanced/audits/8/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":4,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}