Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add xg-gh-25/SwarmAI --skill s_swarm-outgit clone --depth 1 https://github.com/xg-gh-25/SwarmAIWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/xg-gh-25/swarmai/s_swarm-out)<a href="https://agentmods.dev/skills/xg-gh-25/swarmai/s_swarm-out"><img src="https://agentmods.dev/badge/skills/xg-gh-25/swarmai/s_swarm-out/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/xg-gh-25/swarmai/s_swarm-out"><img src="https://agentmods.dev/badge/skills/xg-gh-25/swarmai/s_swarm-out.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00066 | $0.05787 |
| Opus 5.5 | $0.00026 | $0.02315 |
| Sonnet 5.5 | $0.00013 | $0.01157 |
| Haiku 4.5 | $0.00007 | $0.00579 |
Grade A, and why
swarm-out scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 267 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Swarm Out
A Hive is the person's own SwarmAI on an AWS instance. A task dispatched to it runs there to the end, with nobody watching, while this machine can sleep. The run is yours once you dispatch it: you follow it, tell the person where it is when that changes, answer every wait it raises, and finish it (step 5). Nothing on the way waits for the person: they read where it is in this chat, and may step in from the Swarm Out panel, but no step needs them. The Swarm Out panel shows the same runs.
Every task goes out under a Brain's Project Agent: the Brain's definition says how
the work is done there (mode, setup and checks, gates). How this one task runs (native, or a pipeline profile) you choose here, for
this request (step 3). The Hive gets the Brain synced and a project section
before the task. A task that belongs to no Brain goes under the General Brain's
Runner Agent (--brain General).
Commands (they call the local daemon; Hive addresses and credentials stay inside it):
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out hives
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out route --task-file <file> [--brain <B>] [--file <path>] [--bound-project <P>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out spec --brain <B> --task-file <file> --acceptance "<done when>" --execution native|pipeline:<profile> --why "<one sentence>" --returns answer|document|commits [--mode <m>] [--needs-private <why>] [--base <ref>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out dispatch --title "<short title>" --brief "<one or two sentences>" --brain <B> --task-file <file> --acceptance "<done when>" --execution native|pipeline:<profile> --why "<one sentence>" --returns answer|document|commits --revision <revision from spec> [--needs-private <why>] [--hive <name>] [--mode <m>] [--base <ref>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out runs
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out watch <dispatch_id> [<dispatch_id> ...] [--since <token>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out card <dispatch_id> <request_id>
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out answer <dispatch_id> <request_id> --pick "<option label>" --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out read <dispatch_id>
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out diagnose <dispatch_id>
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out accept <dispatch_id> --ended-at <result ended_at> --why "<one sentence>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out return-prepare <dispatch_id> --url <repository url> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out return-land <dispatch_id> --key <key> --tip <sha> --summary-file <file> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out rerun <dispatch_id> --text-file <correction> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out stop|discard <dispatch_id> --why "<w>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out ask-person <dispatch_id> --decide "<what the person decides>" --judgment "<yours>" --why "<why you cannot decide>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out reverted <dispatch_id> [--commit <sha> ...] --why "<what you did>"
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out update-hive --hive <name> [--version <v>]
"$SWARM_BACKEND_BIN" py -m scripts.swarm_out start-hive --hive <name>
The commands on a run are refused when they are not yours: a run another session dispatched, a command the panel does not offer on it now, a third re-send, a discard while something would be lost, an answer to a wait that is not yours. The refusal says why: handle it (below). Give every one of these commands through this CLI, never as a direct HTTP call: the CLI says it is yours.
Each prints JSON; a refusal is {"ok": false, "detail": "..."}.
Only the person's own session may dispatch (the desktop, or their own channel DM): in a session with someone else the commands refuse. Do not try another way.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +1 lines 229e45724b7e
- 2d ago Changed · +5 lines 6885e2007d10
- 3d ago Changed · +30 lines 8f549b9e3ec1
- 4d ago First seen · 231 lines · 66 tokens per session scan A d8cb365c34d6
swarm-out is a skill published in the GitHub repository xg-gh-25/SwarmAI (59 stars, last pushed yesterday), licensed MIT. It adds 66 tokens to every session and 5,787 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-11-02.
swarm-out compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| swarm-outxg-gh-25/SwarmAI | Skill | 59 | yesterday | MIT | A | 66 | Claude Code, Codex |
| linkerd-patternswshobson/agents | Skill | 42k | yesterday | MIT | A | 41 | Claude Code |
| cost-optimizationwshobson/agents | Skill | 42k | yesterday | MIT | A | 48 | Claude Code |
| istio-traffic-managementwshobson/agents | Skill | 42k | yesterday | MIT | A | 40 | Claude Code |
| memory-retainvectorize-io/hindsight | Skill | 59k | yesterday | MIT | A | 46 | Cursor |
| cdf-event-video-generationNVIDIA/skills | Skill | 3.9k | yesterday | Apache-2.0 | A | 167 | Codex |
| cdf-orchestration-setupNVIDIA/skills | Skill | 3.9k | yesterday | Apache-2.0 | A | 105 | Codex |