swarm-out

swarm-out is a skill for Claude Code, Codex from xg-gh-25/SwarmAI. It costs 66 tokens per session (5,787 once invoked), scanned A, original, MIT.

A cloud-task dispatch skill that sends work to one of your SwarmAI “Hives,” which are your own SwarmAI agents running on AWS. It follows the run, answers any waits, and reports its progress until the task ends.

In plain words
What is it for?
Use it to send a task to a Hive, choose how that task should run, and track its location and completion from the chat or Swarm Out panel.
Why use it?
It lets a task continue on a remote machine while your local computer sleeps, without requiring you to monitor every step.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: mentions subagents; names the AskUserQuestion tool.

Good fit Use it to send a task to a Hive, choose how that task should run, and track its location and completion from the chat or Swarm Out panel.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/xg-gh-25/swarmai/s_swarm-out
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add xg-gh-25/SwarmAI --skill s_swarm-out
Clone the repo
git clone --depth 1 https://github.com/xg-gh-25/SwarmAI

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for swarm-out

README.md
[![agentmods](https://agentmods.dev/badge/skills/xg-gh-25/swarmai/s_swarm-out/github.svg)](https://agentmods.dev/skills/xg-gh-25/swarmai/s_swarm-out)
Your own site
<a href="https://agentmods.dev/skills/xg-gh-25/swarmai/s_swarm-out"><img src="https://agentmods.dev/badge/skills/xg-gh-25/swarmai/s_swarm-out/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for swarm-out

Your own site · 80×15
<a href="https://agentmods.dev/skills/xg-gh-25/swarmai/s_swarm-out"><img src="https://agentmods.dev/badge/skills/xg-gh-25/swarmai/s_swarm-out.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 66 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 5,787 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00066 $0.05787
Opus 5.5 $0.00026 $0.02315
Sonnet 5.5 $0.00013 $0.01157
Haiku 4.5 $0.00007 $0.00579

Measured today against content hash 229e45724b7e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

swarm-out scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

backend/skills/s_swarm-out/SKILL.md · 267 lines

How it starts

The opening of the file, as written. The whole thing — 267 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Swarm Out

A Hive is the person's own SwarmAI on an AWS instance. A task dispatched to it runs there to the end, with nobody watching, while this machine can sleep. The run is yours once you dispatch it: you follow it, tell the person where it is when that changes, answer every wait it raises, and finish it (step 5). Nothing on the way waits for the person: they read where it is in this chat, and may step in from the Swarm Out panel, but no step needs them. The Swarm Out panel shows the same runs.

Every task goes out under a Brain's Project Agent: the Brain's definition says how the work is done there (mode, setup and checks, gates). How this one task runs (native, or a pipeline profile) you choose here, for this request (step 3). The Hive gets the Brain synced and a project section before the task. A task that belongs to no Brain goes under the General Brain's Runner Agent (--brain General).

Commands (they call the local daemon; Hive addresses and credentials stay inside it):

"$SWARM_BACKEND_BIN" py -m scripts.swarm_out hives
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out route --task-file <file> [--brain <B>] [--file <path>] [--bound-project <P>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out spec --brain <B> --task-file <file> --acceptance "<done when>" --execution native|pipeline:<profile> --why "<one sentence>" --returns answer|document|commits [--mode <m>] [--needs-private <why>] [--base <ref>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out dispatch --title "<short title>" --brief "<one or two sentences>" --brain <B> --task-file <file> --acceptance "<done when>" --execution native|pipeline:<profile> --why "<one sentence>" --returns answer|document|commits --revision <revision from spec> [--needs-private <why>] [--hive <name>] [--mode <m>] [--base <ref>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out runs
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out watch <dispatch_id> [<dispatch_id> ...] [--since <token>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out card <dispatch_id> <request_id>
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out answer <dispatch_id> <request_id> --pick "<option label>" --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out read <dispatch_id>
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out diagnose <dispatch_id>
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out accept <dispatch_id> --ended-at <result ended_at> --why "<one sentence>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out return-prepare <dispatch_id> --url <repository url> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out return-land <dispatch_id> --key <key> --tip <sha> --summary-file <file> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out rerun <dispatch_id> --text-file <correction> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out stop|discard <dispatch_id> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out ask-person <dispatch_id> --decide "<what the person decides>" --judgment "<yours>" --why "<why you cannot decide>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out reverted <dispatch_id> [--commit <sha> ...] --why "<what you did>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out update-hive --hive <name> [--version <v>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out start-hive --hive <name>

The commands on a run are refused when they are not yours: a run another session dispatched, a command the panel does not offer on it now, a third re-send, a discard while something would be lost, an answer to a wait that is not yours. The refusal says why: handle it (below). Give every one of these commands through this CLI, never as a direct HTTP call: the CLI says it is yours.

Each prints JSON; a refusal is {"ok": false, "detail": "..."}.

Only the person's own session may dispatch (the desktop, or their own channel DM): in a session with someone else the commands refuse. Do not try another way.

Read the full file on GitHub · 267 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +1 lines 229e45724b7e
  2. 2d ago Changed · +5 lines 6885e2007d10
  3. 3d ago Changed · +30 lines 8f549b9e3ec1
  4. 4d ago First seen · 231 lines · 66 tokens per session scan A d8cb365c34d6

Subscribe to this mod's changes

swarm-out is a skill published in the GitHub repository xg-gh-25/SwarmAI (59 stars, last pushed yesterday), licensed MIT. It adds 66 tokens to every session and 5,787 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-02.

Related

swarm-out compared with skills from other repositories

swarm-out next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
swarm-outxg-gh-25/SwarmAISkill59yesterdayMITA66Claude Code, Codex
linkerd-patternswshobson/agentsSkill42kyesterdayMITA41Claude Code
cost-optimizationwshobson/agentsSkill42kyesterdayMITA48Claude Code
istio-traffic-managementwshobson/agentsSkill42kyesterdayMITA40Claude Code
memory-retainvectorize-io/hindsightSkill59kyesterdayMITA46Cursor
cdf-event-video-generationNVIDIA/skillsSkill3.9kyesterdayApache-2.0A167Codex
cdf-orchestration-setupNVIDIA/skillsSkill3.9kyesterdayApache-2.0A105Codex