BC clawhub-swarm-ecosystem-master
Master installer for the ClawHub Swarm Ecosystem — a comprehensive suite of 21 interconnected Hermes skills designed for building, deploying, and managing intelligent multi-agent systems. Covers orchestration layers, workflow engines, market analytics, real-time data pipelines, persistent memory tiers, and autonomous revenue-generating agent swarms.
Master installer for the ClawHub Swarm Ecosystem — a comprehensive suite of 21 interconnected Hermes skills designed for building, deploying, and managing…
As a process C 51/100 · Has gaps — weak spots: result and completion, when it triggers, inputs and preconditions
How to improve
- Say in the description WHEN to use the skill ("use when…", example requests): that is the agent's main cue.
For the model run — optional
- Your own cases (evals/evals.json, 4–6 real requests with expected answers): the full check would then run those instead of a model-drafted suite.
- A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.
Guard findings · 9
✓ No critical or high findings
Medium and low: 9
-
low Risky intent
intent-offensive-securityskill-card.md:22Offensive-security / dual-use content (legitimate for authorised testing; review intended use)Risk: The package includes offensive security and bug-bounty automation that may affect third-party systems. <br>
-
low Risky intent
intent-offensive-securitySKILL-hermes-bug-bounty-mastery.skill.md:3Offensive-security / dual-use content (legitimate for authorised testing; review intended use)# ║ HERMES BUG BOUNTY MASTERY SKILL PACK ║
-
low Risky intent
intent-offensive-securitySKILL-hermes-bug-bounty-mastery.skill.md:11Offensive-security / dual-use content (legitimate for authorised testing; review intended use)A comprehensive, battle-tested bug bounty hunting ecosystem that transforms
-
low Risky intent
intent-offensive-securitySKILL-hermes-bug-bounty-mastery.skill.md:15Offensive-security / dual-use content (legitimate for authorised testing; review intended use)penetration testing frameworks, and passive income automation through
-
low Risky intent
intent-offensive-securitySKILL-hermes-bug-bounty-mastery.skill.md:147Offensive-security / dual-use content (legitimate for authorised testing; review intended use)suitable for Fortune 500 bug bounty programs.
-
low Risky intent
intent-offensive-securitySKILL-hermes-bug-bounty-mastery.skill.md:192Offensive-security / dual-use content (legitimate for authorised testing; review intended use)vulnerability discovery, and Web3 bug bounty program participation
-
low Exfiltration
exfil-webhook-urlSKILL-hermes-bug-bounty-mastery.skill.md:1010Webhook / callback URL commonly used for exfiltration (verify the destination) (placeholder value)DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...
placeholder -
low Exfiltration
exfil-webhook-urlSKILL-hermes-bug-bounty-mastery.skill.md:1011Webhook / callback URL commonly used for exfiltration (verify the destination) (placeholder value)SLACK_WEBHOOK_URL=https://hooks.slack.com/services/...
placeholder -
low Risky intent
intent-offensive-securitySKILL.md:258Offensive-security / dual-use content (legitimate for authorised testing; review intended use)Centralized command and control interface for hive-mind style swarm
Files scanned: 3. Evidence is masked. Grey chips explain why severity was lowered.
Against the Agent Skills spec
- warning
description-no-whendescription does not say WHEN to use the skill (no "use when") - note
frontmatter-keyunknown frontmatter key "priority" - note
frontmatter-keyunknown frontmatter key "runtime" - note
frontmatter-keyunknown frontmatter key "requirements" - note
frontmatter-keyunknown frontmatter key "pre_install" - note
frontmatter-keyunknown frontmatter key "skills" - note
frontmatter-keyunknown frontmatter key "installation" - note
frontmatter-keyunknown frontmatter key "post_install" - note
frontmatter-keyunknown frontmatter key "rollback" - note
frontmatter-keyunknown frontmatter key "documentation"
Process rating: all ten parameters 51/100
- 0Result and completion. Does not say what the result is
- 0Inputs and preconditions. Does not say what the process needs to start
- 0Progress reporting. Says nothing while it works
- 20When it triggers. No condition that starts the skill
- 30Running it twice. 7 mutating operations with no state check
- 40Consistency. Frontmatter name (clawhub-swarm-ecosystem-master) differs from the folder (selling-skills)
- 50Failures and branches. 0 branches, has a failure section
- 100Tools and files. No external tools needed
- 100Steps. 4 steps
- 100Execution cost. Instruction body is 3129 tokens
- medium Safety rules and hard prohibitions inside a skill: they belong in the system prompt, here they protect nothing
- low 11 top-level sections: this looks like several domains in one skill
Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.
Quality signals
- +5Description has no quoted example phrases that should trigger the skill
- +4Description does not say when NOT to use the skill (false activations)
- +3Output format is not stated: the model decides each time
- +2Single-language instructions
- +3Description length 355: enough signal without eating the budget
- +4Structure: 25 headings
- +3Step-by-step instructions: 4 items
- +4Has examples (13 code blocks)
- +1License stated
Quality base 70; lint remarks subtract, signals add up to 100. Result: 70.
External checks
ClawHub: suspicious
This package is mostly transparent, but it bundles broad automation that can publish, trade, bid, conduct outreach, and run offensive security workflows with too little scoping or user-control guidance.
LLM: suspicious (high) · VirusTotal: · 24 Jun 2026