Swarm

Launch 3 parallel research agents (market, users, tech) to investigate an idea from multiple angles simultaneously. Use when user says "swarm research", "par...

This skill appears to do what it says and has no installers or secret requests. Before installing/use: 1) Confirm you are comfortable with the agent reading/writing files in your project (it will write docs/research.md). 2) Note the SKILL.md mentions CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS and .claude/settings.json — if you don't want agent teams enabled, do not set that env var; if you do, put it in your Claude settings intentionally. 3) The skill expects WebSearch/WebFetch and optional MCP backends (GitHub/KB/session searches); ensure you trust those integrations and that no sensitive secrets or private repo content will be crawled. 4) If you need stricter controls, request the author to declare the env var/config path formally in the skill metadata and to limit allowed-tools or document exact file access the skill will perform.

Type: OpenClaw Skill Name: solo-swarm Version: 1.6.0 The skill is classified as suspicious primarily due to the inclusion of the `Bash` tool in the `allowed-tools` list within `SKILL.md`. While the skill's instructions are benign and focused on research, allowing `Bash` execution introduces a significant vulnerability. An AI agent with `Bash` access, even if not explicitly instructed to misuse it by the skill itself, could be susceptible to prompt injection attacks, leading to arbitrary command execution (RCE) on the host system. There are no explicit instructions for malicious actions like data exfiltration or persistence, but the capability for such actions is present through the `Bash` tool.