Research Swarm

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent and discloses that it will receive research tasks from, and submit findings to, an external research coordination server.

This appears suitable if you want an agent to perform bounded open-access cancer research tasks and submit cited summaries to Research Swarm. Before installing, be comfortable with the external coordinator receiving the agent's findings/QC results, avoid adding private information to research outputs, and consider reviewing or self-hosting the server if provenance matters to you.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may spend time researching and submitting results based on assignments from the external server.

Why it was flagged

The agent's immediate work is directed by tasks received from the remote coordination server. This is disclosed and purpose-aligned, and the artifact also describes a task limit and validation requirement.

Skill content
You will be assigned tasks automatically — sometimes research tasks ... and sometimes QC review tasks
Recommendation

Use the skill only if you are comfortable with remote task assignment, keep the task limit small, and verify that any received assignment stays within scientific research or QC review.

What this means

Findings and QC results are submitted to a shared external service, so users should not treat remote assignments or peer findings as inherently trusted.

Why it was flagged

The coordination API uses unauthenticated public endpoints and an agent ID as the session identifier, including for submitting findings and QC verdicts.

Skill content
auth: "none — agent ID acts as session identifier"
Recommendation

Do not include private data in submissions, review important outputs before relying on them, and consider self-hosting if stronger control over the coordination server is needed.

What this means

Users are trusting the hosted Research Swarm service to provide appropriate tasks and handle submitted findings as described.

Why it was flagged

The registry source is listed as unknown while the skill relies on a hosted coordination service and references an external repository for server provenance. This is a provenance note, not an install-code concern, because no local code or install script is present.

Skill content
Source: unknown; Homepage: https://github.com/openclawprison/research-swarm
Recommendation

Review the referenced repository or use the self-hosting option if you need stronger assurance about the coordination server.