Zouroboros Swarm Gate

Zero-cost task classifier (~2ms) that decides if a task needs multi-agent orchestration. 7 weighted signals, no API calls. Part of the Zouroboros ecosystem.

Security Scan

The skill is internally consistent: a small Node.js CLI/library that scores task text with local regex heuristics and requires only node/npm; nothing requested or installed appears disproportionate to its stated purpose.

Purpose & Capability

Name/description (task-complexity classifier) align with the shipped code: evaluate() and a CLI that runs local regex/heuristics. Minor inconsistency: SKILL.md and README reference the package name 'zouroboros-swarm-gate' / import name 'zouroboros-swarm-gate', while package-lock.json shows '@zouroboros/swarm-gate' (namespaced). This is likely a packaging/naming mismatch but not indicative of malicious behavior.

Instruction Scope

SKILL.md only documents local CLI and programmatic use, thresholds, and signals. The runtime instructions do not ask the agent to read unrelated files, environment variables, or call external endpoints.

Install Mechanism

Install spec uses npm (node package) and provides a binary 'swarm-gate' — expected for a Node CLI. No external arbitrary URL downloads or extract steps. Note: package-lock references many esbuild/platform dev artifacts (normal for JS packages) and there is the package-name discrepancy noted above; you should confirm the exact npm package name/publisher before install.

Credentials

The skill declares no required environment variables, no credentials, and no config paths. The code excerpts show only local text analysis (regex/heuristics), so no secrets are requested or needed.

Persistence & Privilege

Skill does not request always:true and uses normal user-invocable/autonomous defaults. Install produces its own binary and package files only; it does not modify other skills or system-wide agent settings in the provided artifacts.

Assessment

This package appears to be what it says: a small, local regex-based task classifier. Before installing: verify the exact npm package name and publisher on npmjs.com (SKILL.md/README package name differs from package-lock), inspect package.json on the published package to confirm the 'bin' entry points, and review the published package contents for unexpected network calls or postinstall scripts. As with any global Node package, consider installing in a sandbox or limited environment first and avoid granting extra credentials or system permissions unless you review and trust the maintainer. If you need higher assurance, confirm the GitHub repository and npm publisher identity (signatures, stars, recent activity).

Mechanical task complexity classifier that determines whether a task warrants multi-agent swarm orchestration. Runs in ~2ms with zero API cost — pure regex + heuristic scoring.

Usage

CLI

npx zouroboros-swarm-gate "build a REST API with auth, tests, and deploy to production"
# → [Swarm Decision Gate: SWARM — score 0.68]

npx zouroboros-swarm-gate --json "fix the typo on line 42"
# → { "decision": "DIRECT", "score": 0.05, ... }

Programmatic

import { evaluate } from "zouroboros-swarm-gate";

const result = evaluate("implement dashboard with 9 components, API routes, and deploy");
console.log(result.decision); // "SWARM"
console.log(result.score);    // 0.72
console.log(result.signals);  // { parallelism: 0.8, scopeBreadth: 0.6, ... }

Exit Codes

Code	Decision	Meaning
0	SWARM / FORCE_SWARM	Task warrants multi-agent orchestration
2	DIRECT	Execute directly, no orchestration needed
3	SUGGEST	Orchestration recommended but not required
1	Error	Something went wrong

7 Signals

Signal	Weight	What It Detects
parallelism	20%	Multiple independent workstreams, action verbs, lists
scopeBreadth	15%	Files, systems, and domains referenced
qualityGates	15%	Test/validation/review requirements
crossDomain	15%	Multiple executor types (code, design, ops, etc.)
deliverableComplexity	15%	Multiple output artifacts
mutationRisk	10%	Production/shared state changes
durationSignal	10%	Estimated effort and complexity

Part of the Zouroboros Ecosystem

Zouroboros is a self-improving AI orchestration framework. These standalone packages give you a taste of what's possible. For the full experience — persistent memory, swarm orchestration, scheduled agents, persona routing, and self-healing infrastructure — get a Zo Computer.

Built by @Xmarlandoj