federation-init

Savant verdict: Review advised

Security analysis or source-hub review identified patterns requiring attention.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

Scan pending.

Structure

• No license declaredConfirm you may reuse this skill before importing it into your repository.
• The source hub's security checks flagged this skillGen Agent Trust Hub: warn (This skill initializes a federation node by downloading and executing the '@claude-flow/plugin-agent-federation' package from the npm registry. It uses an unpinned version (@latest), which introduces supply chain risks. Furthermore, the skill processes user input for compliance modes without sanitization, creating a potential command injection vulnerability.); Snyk: warn (Risk: MEDIUM · 1 issue)

SKILL.md

---
name: federation-init
description: Initialize federation on this node — generate keypair and configure peers
allowed-tools: Bash(npx *) mcp__plugin_ruflo-core_ruflo__memory_store mcp__plugin_ruflo-core_ruflo__hooks_post-task Read Write
argument-hint: "[--compliance hipaa|soc2|gdpr|none]"
---
Initialize this node for federation. Generates an ed25519 keypair, creates the federation config, and optionally sets a compliance mode.

Steps:
1. `npx -y -p @claude-flow/plugin-agent-federation@latest ruflo-federation init`
2. If a compliance mode is specified, configure it: `npx -y -p @claude-flow/plugin-agent-federation@latest ruflo-federation config --compliance MODE`
3. Show the node's public key and endpoint for sharing with peers

Store init event:
`mcp__plugin_ruflo-core_ruflo__memory_store({ key: "federation-init", value: "Node initialized", namespace: "federation" })`