Skills hive-mind-advanced
📦
hive-mind-advanced
Content revision r2 Safe ⚙️ External commands🌐 Network access
Coordinate Advanced Claude Flow Agent Swarms
Complex projects require coordinated agents, durable context, and transparent decisions. This skill guides Claude Flow swarms through queen-led roles, consensus, memory, and sessions.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "hive-mind-advanced" from https://skillstore.io/skills/ruvnet-hive-mind-advanced.md and its manifest at https://skillstore.io/api/skills/ruvnet-hive-mind-advanced/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "hive-mind-advanced". Plan a swarm to build an authenticated REST API.
Expected outcome:
Use a tactical queen with backend, database, security, testing, and documentation workers. Require weighted consensus at architecture and release checkpoints.
Using "hive-mind-advanced". Recover a paused research session without losing findings.
Expected outcome:
Inspect session status and memory first. Verify the latest checkpoint, resume the selected session, then monitor metrics before assigning new tasks.
Using "hive-mind-advanced". Coordinate frontend and backend work as separate hives.
Expected outcome:
Create named frontend and backend hives with shared memory keys. Use interface checkpoints and consensus reviews before integration testing.
Security Audit
Safev9 • 7/23/2026 Open versioned report
Nineteen findings are confirmed because command examples invoke the unpinned claude-flow package through npx, which may download and execute external code. The remaining findings are Markdown delimiters, inline labels, JavaScript examples, or documentation links and are false positives. No prompt injection or data-exfiltration intent was found.
1
Files scanned
710
Lines analyzed
19
Review items
0
False positives ignored
Capability review items (19)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
```bash
The fenced block contains executable, unpinned npx claude-flow initialization commands. Running them can download package code and modify local configuration.
Medium
Ruby/shell backtick execution
```bash
The block instructs users to execute an unpinned claude-flow package through npx and spawn worker processes. This can download and run external package code.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx for status, metrics, and memory operations. Execution may download external package code.
Medium
Ruby/shell backtick execution
```bash
The block runs unpinned npx commands that pause, resume, or stop local sessions. These commands execute external package code and change runtime state.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to spawn a swarm. Running it can download external code and start worker processes.
Medium
Ruby/shell backtick execution
```bash
The block executes an unpinned claude-flow package through npx for a SPARC workflow. This can download package code and launch multiple agents.
Medium
Ruby/shell backtick execution
```bash
The block uses unpinned npx commands to analyze a repository and coordinate a pull request review. Execution can download external code and access repository content.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to start a strategic swarm. Running it can download and execute external package code.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to start a tactical swarm. Running it can download and execute external package code.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to start an adaptive swarm. Running it can download and execute external package code.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx for status, metrics, and memory operations. Execution may download external package code.
Medium
Ruby/shell backtick execution
```bash
The block executes an unpinned npx command that resumes a local session. It can download external package code and alter runtime state.
Medium
Ruby/shell backtick execution
```bash
The block runs unpinned npx maintenance commands, including export with clear. Execution can download package code and delete local memory data.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to spawn consensus workflows. Running it can download and execute external package code.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to start two swarms. Running it can download external code and create multiple processes.
Medium
Ruby/shell backtick execution
```bash
The block invokes unpinned npx commands to export and import local session data. Execution can download package code and overwrite local state.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to initialize and spawn a large swarm. Execution can download code and create multiple processes.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to start a research swarm. Running it can download and execute external package code.
Medium
Ruby/shell backtick execution
```bash
The block invokes the unpinned claude-flow package through npx to review a pull request. Execution can download code and access repository content.
Risk Factors
⚙️ External commands (50)
SKILL.md:56-65 SKILL.md:65-69 SKILL.md:69-84 SKILL.md:84-88 SKILL.md:88-97 SKILL.md:97-105 SKILL.md:105-117 SKILL.md:117-130 SKILL.md:130-141 SKILL.md:141-153 SKILL.md:153-159 SKILL.md:159-162 SKILL.md:162-163 SKILL.md:163-164 SKILL.md:164-165 SKILL.md:165-166 SKILL.md:166-167 SKILL.md:167-168 SKILL.md:168-169 SKILL.md:169-173 SKILL.md:173-186 SKILL.md:186-198 SKILL.md:198-205 SKILL.md:205-209 SKILL.md:209-217 SKILL.md:217-225 SKILL.md:225-227 SKILL.md:227-230 SKILL.md:230-235 SKILL.md:235-239 SKILL.md:239-249 SKILL.md:249-253 SKILL.md:253-259 SKILL.md:259-286 SKILL.md:286-296 SKILL.md:296-316 SKILL.md:316-328 SKILL.md:328-332 SKILL.md:332-342 SKILL.md:342-371 SKILL.md:371-373 SKILL.md:373-376 SKILL.md:376-378 SKILL.md:378-381 SKILL.md:381-383 SKILL.md:383-397 SKILL.md:397-405 SKILL.md:405-408 SKILL.md:408-412 SKILL.md:412-416
🌐 Network access (4)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/ruvnet-hive-mind-advanced/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/ruvnet-hive-mind-advanced?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/ruvnet-hive-mind-advanced?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/ruvnet-hive-mind-advanced/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/ruvnet-hive-mind-advanced.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
ruvnet. (2026). hive-mind-advanced security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/ruvnet-hive-mind-advanced/audits/9BibTeX citation
@techreport{ruvnet-ruvnet-hive-mind-advanced-2026,
author = {ruvnet},
title = {hive-mind-advanced security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/ruvnet-hive-mind-advanced/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "hive-mind-advanced security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "ruvnet"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/ruvnet-hive-mind-advanced/audits/9"
identifiers:
- type: other
value: "skillstore:ruvnet-hive-mind-advanced:audit:9"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
Claude Flow Team Recommended
dnyoussef-hive-mind-advanced
Skillstore Score 79
Evidence Confidence High
Skillstore usage 9
Updated
2026-08-21
ruvnet Current
ruvnet-hive-mind-advanced
Skillstore Score 76
Evidence Confidence High
Skillstore usage 9
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
72
Community
74
Spec Compliance
What You Can Build
Plan a distributed implementation
Define queen strategy, worker specialties, task ownership, and consensus gates for a complex software project.
Coordinate delivery and review
Organize parallel implementation, testing, security review, documentation, and release decisions across specialized agents.
Operate persistent agent sessions
Monitor sessions, preserve checkpoints, inspect memory, and tune worker capacity for repeated research or development work.
Try These Prompts
Start a basic hive
Plan a basic hive mind for [objective]. Recommend a queen type, four worker roles, initialization steps, and status checks.
Design a delivery swarm
Design a Claude Flow swarm for [project]. Assign specialized workers, dependencies, checkpoints, and a suitable consensus strategy.
Recover a stalled session
Diagnose this stalled hive session: [symptoms]. Propose safe status, metrics, memory, checkpoint, and resume steps without clearing data.
Engineer a multi-hive workflow
Create an advanced multi-hive plan for [program]. Define shared memory, Byzantine decisions, scaling thresholds, failure recovery, and measurable review gates.
Best Practices
- Match the queen type to the objective before selecting worker count or consensus rules.
- Create checkpoints before state-changing operations and monitor status, metrics, and memory throughout execution.
- Pin reviewed package versions and inspect generated commands before allowing external execution.
Avoid
- Do not spawn many workers without clear roles, dependencies, and completion criteria.
- Do not clear memory, force initialization, or import sessions without a verified backup.
- Do not use consensus as a substitute for tests, security review, or accountable human decisions.
Frequently Asked Questions
Does this skill include the Claude Flow runtime?
No. It documents Claude Flow workflows and APIs, while the runtime must be installed and executed separately.
Which queen type should I choose?
Use strategic for planning, tactical for implementation, and adaptive for changing or optimization-focused work.
Which consensus methods are covered?
The skill covers majority voting, queen-weighted voting, and Byzantine consensus requiring a two-thirds majority.
Can sessions continue after interruption?
The documented workflows support checkpoints, pause, resume, export, and import when the installed runtime provides these features.
Does the skill access the network?
The Markdown itself does not. Its unpinned npx commands may download packages, and repository workflows may access remote services.
Are the command examples safe to run automatically?
No. Review package versions, arguments, repository access, backups, and state-changing flags before execution.