Agent Swarm 2.13.1 tightens OAuth, schedules and sender trust
Agent Swarm 2.13.1 checks every redirect hop and resolved address for MCP OAuth and proxy fetches, restricts schedule changes to creators or leads and marks unknown Slack teams as untrusted. It also adds worktree cleanup, live sheet and board embeds and ownership checks for global script actions.
Why it matters: OAuth redirects, proxy fetches, schedules and messaging identity are high-authority agent entry points. The release turns several implicit trust decisions into explicit network, creator and sender checks while adding cleanup for abandoned worktrees.