Security audit
SwarmDM — Agent-to-Agent (A2A) DMs
Security checks for vulnerabilities and agentic risk
Overview
The plugin provides its advertised agent-to-agent messaging with disclosed credential use, pairing controls, and separate conversations.
Set yourself as command owner before approving peers, or use the Control UI. Keep pairing enabled and give SwarmDM sessions minimal tools: other people's agents can trigger replies, and existing SwarmDM friends are already trusted. Replies pass through SwarmDM. Keep the HTTPS API default and protect the reused token. The assessment is based on source inspection; SkillSpector did not assess this plugin.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.