Habilidades when-orchestrating-swarm-use-swarm-orchestration
📦
when-orchestrating-swarm-use-swarm-orchestration
v1.0.0 Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos
Orquestar enjambres multiagente de Claude Flow
Las tareas de desarrollo grandes son difíciles de dividir, asignar y supervisar entre agentes. Esta skill proporciona un proceso por fases de Claude Flow para planificación, ejecución, supervisión y síntesis.
Compatible con: Claude Codex Code(CC)
Detente y solicita confirmación antes de instalar.
Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "when-orchestrating-swarm-use-swarm-orchestration" from https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration.md and its manifest at https://skillstore.io/api/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "when-orchestrating-swarm-use-swarm-orchestration". Planificar la creación de una aplicación full-stack con varios roles de agente.
Resultado esperado:
- Un árbol de tareas por fases que cubre arquitectura, backend, frontend, infraestructura y pruebas.
- Asignaciones de agentes para coordinadores, investigadores, programadores, revisores y testers.
- Puntos de control de validación para dependencias, progreso y síntesis final.
Usando "when-orchestrating-swarm-use-swarm-orchestration". Supervisar un enjambre que puede tener trabajo bloqueado.
Resultado esperado:
- Un resumen de progreso con recuentos de tareas completadas, activas, pendientes, bloqueadas y fallidas.
- Una revisión de bloqueadores centrada en tareas obsoletas, fallos de dependencias y agentes que no responden.
- Acciones de seguimiento recomendadas para reasignación, reintento o escalado.
Usando "when-orchestrating-swarm-use-swarm-orchestration". Sintetizar resultados después de una ejecución multiagente.
Resultado esperado:
- Resultados agrupados por fases de arquitectura, implementación y pruebas.
- Una lista de comprobación de validación final para riesgos de completitud y pérdida de datos.
- Un esquema de informe con métricas, cronología, resultados e incidencias sin resolver.
Auditoría de seguridad
Riesgo altov8 • 5/7/2026 Abrir el informe versionado
The skill is not malicious, and no prompt injection text was found. It does contain real external command risk because many examples run npx claude-flow@alpha, spawn agents, monitor tasks, and write artifacts. Several static hits were markdown, JSON, JavaScript, shebang, jq, date, or workflow-status false positives.
4
Archivos escaneados
928
Líneas analizadas
28
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (2)
Alto
Unpinned Alpha Package Execution
The skill repeatedly instructs users to run npx claude-flow@alpha. npx can fetch and execute package code, and the alpha tag is mutable.
The commands are direct npx invocations using the mutable @alpha tag. This is a clear supply-chain and remote code execution risk if run without approval.
Medio
Unbounded Swarm Resource Usage
The workflow spawns many agents and starts long-running monitors. Without explicit user limits, this can consume compute, tokens, and project resources unexpectedly.
The cited lines spawn multiple agent types and run background monitoring loops. The behavior is documented, but resource limits and consent checks are not specified.
Elementos de revisión de capacidades (28)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Medio
Shell command substitution
COMPLETED=$(npx claude-flow@alpha task list --filter "completed" | wc -l)
The substitution runs npx claude-flow@alpha inside monitoring or counting logic. It is intended orchestration behavior, but it executes an external command in the local environment.
Medio
Shell command substitution
TOTAL=$(npx claude-flow@alpha task list | wc -l)
The substitution runs npx claude-flow@alpha inside monitoring or counting logic. It is intended orchestration behavior, but it executes an external command in the local environment.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Ruby/shell backtick execution
```bash
The referenced bash block instructs users or agents to run npx claude-flow@alpha and write workflow artifacts. This is intended behavior, but it executes an external npm package and can alter local state.
Medio
Shell command substitution
DEP_STATUS=$(npx claude-flow@alpha task status --task-id $DEP --format json | jq -r '.status')
The command passes values derived from decomposition.json into npx claude-flow arguments. An untrusted or malformed plan file could cause unintended task or agent operations.
Medio
Shell command substitution
AGENT_ID=$(npx claude-flow@alpha agent list \
The command passes values derived from decomposition.json into npx claude-flow arguments. An untrusted or malformed plan file could cause unintended task or agent operations.
Medio
Shell command substitution
COMPLETED=$(npx claude-flow@alpha task list --filter "completed" | wc -l)
The substitution runs npx claude-flow@alpha inside monitoring or counting logic. It is intended orchestration behavior, but it executes an external command in the local environment.
Medio
Shell command substitution
TOTAL=$(npx claude-flow@alpha task list | wc -l)
The substitution runs npx claude-flow@alpha inside monitoring or counting logic. It is intended orchestration behavior, but it executes an external command in the local environment.
Medio
Shell command substitution
RESEARCHER_RESULTS=$(npx claude-flow@alpha task results --agent-type researcher --format json)
The command collects task results through npx claude-flow into shell variables. Those results may contain project data, so this external command use needs consent and scope control.
Medio
Shell command substitution
CODER_RESULTS=$(npx claude-flow@alpha task results --agent-type coder --format json)
The command collects task results through npx claude-flow into shell variables. Those results may contain project data, so this external command use needs consent and scope control.
Medio
Shell command substitution
REVIEWER_RESULTS=$(npx claude-flow@alpha task results --agent-type reviewer --format json)
The command collects task results through npx claude-flow into shell variables. Those results may contain project data, so this external command use needs consent and scope control.
Medio
Template literal with command substitution
```bash
The bash block combines shell expansion with npx claude-flow orchestration actions. The pattern is legitimate for this workflow, but it remains real external command execution.
Medio
Template literal with command substitution
```bash
The bash block combines shell expansion with npx claude-flow orchestration actions. The pattern is legitimate for this workflow, but it remains real external command execution.
Medio
Template literal with command substitution
```bash
The bash block combines shell expansion with npx claude-flow orchestration actions. The pattern is legitimate for this workflow, but it remains real external command execution.
Medio
Template literal with command substitution
```bash
The bash block combines shell expansion with npx claude-flow orchestration actions. The pattern is legitimate for this workflow, but it remains real external command execution.
Medio
Template literal with command substitution
```bash
The bash block combines shell expansion with npx claude-flow orchestration actions. The pattern is legitimate for this workflow, but it remains real external command execution.
Medio
Template literal with command substitution
```bash
The bash block combines shell expansion with npx claude-flow orchestration actions. The pattern is legitimate for this workflow, but it remains real external command execution.
Factores de riesgo
⚙️ Comandos externos (71)
PROCESS.md:53 PROCESS.md:54 PROCESS.md:6 SKILL.md:74-102 SKILL.md:102-107 SKILL.md:107-118 SKILL.md:118-121 SKILL.md:121-132 SKILL.md:132-135 SKILL.md:135-147 SKILL.md:147-151 SKILL.md:151-170 SKILL.md:170-192 SKILL.md:192-230 SKILL.md:230-234 SKILL.md:234-260 SKILL.md:260-264 SKILL.md:264-274 SKILL.md:274-296 SKILL.md:296-326 SKILL.md:326-330 SKILL.md:330-368 SKILL.md:368-372 SKILL.md:372-390 SKILL.md:390-412 SKILL.md:412-447 SKILL.md:447-451 SKILL.md:451-462 SKILL.md:462-466 SKILL.md:466-486 SKILL.md:486-508 SKILL.md:508-539 SKILL.md:539-543 SKILL.md:543-554 SKILL.md:554-559 SKILL.md:559-564 SKILL.md:564-567 SKILL.md:567-576 SKILL.md:576-579 SKILL.md:579-595 SKILL.md:595-599 SKILL.md:599-616 SKILL.md:194 SKILL.md:335 SKILL.md:338 SKILL.md:339 SKILL.md:340 SKILL.md:345 SKILL.md:355-358 SKILL.md:421 SKILL.md:422 SKILL.md:423 SKILL.md:469 SKILL.md:471 SKILL.md:538 SKILL.md:561 SKILL.md:562 SKILL.md:563 SKILL.md:569 SKILL.md:572 SKILL.md:575 SKILL.md:587 SKILL.md:192-230 SKILL.md:330-368 SKILL.md:412-447 SKILL.md:466-486 SKILL.md:508-539 SKILL.md:559-564 SKILL.md:567-576 SKILL.md:579-595 SKILL.md:331
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
DNYoussef. (2026). when-orchestrating-swarm-use-swarm-orchestration security audit report (audit version 8) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration/audits/8Cita BibTeX
@techreport{dnyoussef-dnyoussef-when-orchestrating-swarm-use-swarm-orchestration-2026,
author = {DNYoussef},
title = {when-orchestrating-swarm-use-swarm-orchestration security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration/audits/8},
note = {Author version 1.0.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "when-orchestrating-swarm-use-swarm-orchestration security audit report (audit version 8)"
version: "1.0.0"
type: report
authors:
- name: "DNYoussef"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/dnyoussef-when-orchestrating-swarm-use-swarm-orchestration/audits/8"
identifiers:
- type: other
value: "skillstore:dnyoussef-when-orchestrating-swarm-use-swarm-orchestration:audit:8"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
100
Mantenibilidad
87
Contenido
71
Comunidad
78
Cumplimiento de la especificación
Lo que puedes crear
Coordinar la creación de una aplicación grande
Planificar arquitectura, backend, frontend, infraestructura, pruebas y revisión entre agentes especializados.
Estandarizar la ejecución de flujos de trabajo de agentes
Usar la lista de comprobación por fases para mantener la descomposición, asignación, supervisión y síntesis de forma coherente entre proyectos.
Revisar la calidad de ejecución del enjambre
Recopilar métricas de progreso, tareas bloqueadas, resultados finales y objetivos de rendimiento después de una ejecución multiagente.
Prueba estos prompts
Descomponer una tarea
Use this skill to decompose this task into phases, dependencies, and suggested agent roles: [task].
Preparar un plan de enjambre
Create a Claude Flow swarm plan for [project]. Include topology, coordinators, specialist agents, dependencies, and validation checks.
Supervisar la ejecución activa
Use this skill to define monitoring steps for the active swarm. Focus on completion rate, blocked tasks, agent health, and progress reporting.
Recuperar y sintetizar resultados
Analyze this swarm state: [status]. Recommend recovery actions, final result collection, synthesis groups, validation checks, and report contents.
Mejores prácticas
- Revisar cada comando de shell antes de ejecutarlo en un espacio de trabajo de proyecto.
- Establecer límites explícitos de agentes, duración y salida antes de que comience la orquestación.
- Validar las dependencias y los resultados finales antes de aceptar los resultados sintetizados.
Evitar
- No ejecutar comandos de paquetes sin versiones fijadas en repositorios sensibles sin aprobación.
- No iniciar enjambres grandes antes de definir el alcance de la tarea y los criterios de éxito.
- No tratar la salida sintetizada como correcta sin revisión humana.
Preguntas frecuentes
¿En qué ayuda esta skill?
Ayuda a planificar, ejecutar, supervisar y resumir flujos de trabajo de orquestación multiagente de Claude Flow.
¿Ejecuta comandos automáticamente?
No. Proporciona ejemplos de comandos y orientación de proceso que un usuario o agente puede elegir ejecutar.
¿A qué herramientas está dirigida?
Está dirigida a flujos de trabajo de Claude Flow y aparece listada para usuarios de Claude, Codex y Claude Code.
¿Qué debo comprobar antes de usarla?
Confirmar la confianza de los paquetes, los permisos del proyecto, los límites de agentes, las rutas de salida y cualquier regla de aprobación de la organización.
¿Puede recuperar tareas bloqueadas?
Incluye orientación para detectar bloqueadores y reasignar o reintentar trabajo detenido.
¿Se garantiza que la salida final sea correcta?
No. La skill recomienda validación, pero los usuarios deben revisar los resultados sintetizados y los cambios del proyecto.
Detalles del desarrollador
Autor
DNYoussefLicencia
MIT
Versión del autor
v1.0.0
Revisión de Skillstore
r1
Ref.
c579efd02184f1128d6741d16e6c8d951d7d4208
Actualidad del mantenimiento
18/7/2026
Uso
4 descargas · 279 vistas
Estructura de archivos