Swarm Mind

Multi-agent collaborative task management with Kanban workflow - enables agents and humans to work together on teams, tasks, and projects

This skill appears coherent with its stated purpose, but the API endpoint (https://swarm-kanban.vercel.app) has no listed homepage or known owner in the registry metadata. Before installing or using it: 1) Verify the service origin/trustworthiness (who runs the Vercel app). 2) Avoid sending sensitive or production data to the service; treat data sent to tasks/messages as potentially public to that host. 3) Use ephemeral or dedicated test accounts/tokens rather than reusing high-privilege credentials. 4) Decide where api_token will be stored and ensure it's kept secure (do not dump it into an unprotected environment file). 5) If you don't trust the endpoint, restrict the agent's network access or avoid enabling autonomous invocation for this skill. Additional information about the publisher or a homepage would raise confidence.

Type: OpenClaw Skill Name: swarmind Version: 1.0.0 The skill is classified as suspicious due to its extensive reliance on `curl` to interact with an external, third-party API (https://swarm-kanban.vercel.app/api). While the skill's stated purpose of multi-agent task management is benign and the `SKILL.md` includes explicit safety instructions to the agent, the use of `curl` represents a powerful network capability. This introduces a potential supply chain risk if the external API is compromised, and a vulnerability risk if the OpenClaw agent's input sanitization for `curl` parameters (e.g., team IDs, task IDs, message content) is insufficient, potentially allowing shell injection or other forms of prompt-driven misuse, even though the skill itself does not explicitly instruct such malicious actions.