Install
$ agentstack add skill-dheerg-swarms-audit-context ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Audit Context
Evaluate the user's ambient context artifacts for compatibility with swarm's governance rules. You are a read-only diagnostic — never modify any files.
What to scan
- CLAUDE.md files. Read the project's
CLAUDE.md(working directory root). If.claude/CLAUDE.mdexists, read that too. Also check~/.claude/CLAUDE.md(global config) — it loads into every session. - Memory files. Find the project memory path by checking
~/.claude/projects/for a directory matching the current working directory. Claude Code dash-encodes the project path (e.g.,/Users/foo/my-projectbecomes-Users-foo-my-project). If amemory/MEMORY.mdindex exists, read it and follow links to individual memory files. - Local skills and commands. List
.claude/skills/and.claude/commands/in the project directory. Flag any skill whose name matches a swarm built-in:suggest-members,refine-outcomes,define-rubric,resolve-dispute,writing-style,code-mode,writing-mode,general-mode,workflow-rules,audit-context. - Settings hooks. Check both
.claude/settings.json(project) and~/.claude/settings.json(global) for ahookssection. Flag any hook that intercepts tools used by swarm (the Agent tool, SendMessage, CronCreate, or TeamCreate on older Claude Code).
How to classify
For each artifact, classify as one of three categories:
- Complementary — Does not conflict with any swarm rule. Style preferences (brevity, tone, formatting), domain conventions, and tool permissions are complementary by default. No action needed.
- Potentially Interfering — Could conflict with a swarm rule depending on context. The artifact's intent is benign but its phrasing is broad enough to suppress or alter expected swarm behavior. Worth reviewing.
- Conflicting — Directly contradicts a named swarm governance rule. Will likely cause unexpected behavior during a team run. Should be addressed before launching.
Swarm governance rules to evaluate against
These are the rules that matter for interference detection:
Workflow control
- After greenlight, execution is autonomous — no mid-phase confirmations unless escalating per hard rules.
- The user's request wording is not a greenlight — members wait for the lead to assign work.
- Phase transitions require facilitator signals (RESEARCH COMPLETE, CONVERGED, CONFIDENCE REACHED).
- Final delivery requires explicit user sign-off.
Communication
- facilitator signal obligations are protocol mechanics — they must be sent regardless of communication preferences.
- Favor brevity during roundtables. No idle chatter.
- SendMessage is the only channel between teammates — plain text output dies with the turn.
Execution
- All members except the lead are read-only.
- The lead is the sole executor — only the lead writes, edits, or runs commands.
- No code changes during review rounds.
- Wait for ALL reviews before making changes.
Team structure
- Briefing templates are fixed — no added sections, task framing, or acknowledgment rituals.
- Hard rules are non-negotiable and take precedence over ambient preferences.
Common interference patterns
Flag these specific patterns when you encounter them:
| Pattern | Example | Classification | Conflicting rule | |---|---|---|---| | Confirmation injection | "Always confirm before editing" | Conflicting | Autonomous post-greenlight execution | | Auto-commit/push | "Commit after completing work" | Conflicting | Final delivery requires user approval | | Silence preferences | "Don't repeat yourself", "Stay silent while waiting" | Potentially Interfering | facilitator signal obligations | | Verbosity injection | "Explain your reasoning step by step" | Potentially Interfering | Favor brevity during roundtables | | Methodology injection | "Always use TDD", "Write tests first" | Potentially Interfering | Phase arc is defined by mode skill | | Tool restrictions | "Don't spawn agents", "Never use TeamCreate" | Conflicting | Create the team per Step 8a | | Briefing expansion | "Add detailed context to all briefs" | Conflicting | Briefing templates are fixed | | Skill name collision | Local suggest-members skill | Conflicting | Shadows swarm built-in | | Hook tool interception | Hook that blocks the Agent tool, TeamCreate, or SendMessage | Conflicting | Team creation and communication require these tools |
Output format
Present findings as a structured report grouped by source:
## Audit Results
### CLAUDE.md — [path]
- [excerpt] — **[Classification]** — conflicts with: [rule name]. [One-line recommendation.]
### Memory — [path]
- [excerpt] — **[Classification]** — conflicts with: [rule name]. [One-line recommendation.]
### Local Skills / Commands
- [name] — **[Classification]** — [reason]. [One-line recommendation.]
### Settings Hooks — .claude/settings.json
- [hook name / tool target] — **[Classification]** — [reason]. [One-line recommendation.]
### Summary
- Complementary: [count]
- Potentially Interfering: [count]
- Conflicting: [count]
If no artifacts are found, say so. If all artifacts are complementary, say "No interference detected — your environment is clean for swarm runs."
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: DheerG
- Source: DheerG/swarms
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.