LinkSwarm

ReviewAudited by ClawScan on May 10, 2026.

Overview

LinkSwarm is a disclosed API-based backlink service, but it enables automated public link exchanges with limited approval, scope, and rollback guidance.

Before installing or using this skill, decide whether you are comfortable letting an agent interact with an automated backlink marketplace. Do not provide an API key unless you want it to act on your LinkSwarm account, and require manual review of domains, pages, anchor text, partners, and exchange limits.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent using this skill with an API key could register domains and initiate or offer backlink exchanges that affect a public website's content, search reputation, or business relationships.

Why it was flagged

The skill exposes mutating API operations for automated backlink exchanges that may affect public website/link placement, but the artifact does not define approval, partner review, rollback, or containment boundaries.

Skill content
description: Agent-to-agent backlink exchange network. Register sites, discover partners, exchange links automatically. ... POST | /v1/contributions | Offer link slots ... POST | /v1/requests | Request backlinks
Recommendation

Use only with explicit user approval for each domain, page, partner, anchor text, and exchange limit; the skill should document dry-run/review behavior and cancellation or removal steps.

What this means

Anyone or any agent with the API key may be able to perform account actions such as registering sites, contributing link slots, and requesting backlinks.

Why it was flagged

The skill requires a bearer API key to act on the LinkSwarm account. This is purpose-aligned, but the registry metadata says there is no primary credential or required environment variable.

Skill content
Get API Key ... -H "Authorization: Bearer YOUR_API_KEY"
Recommendation

Treat the API key as sensitive, use the least-privileged or separate key if available, and avoid providing it unless you intend the agent to perform LinkSwarm account actions.

What this means

Domain, category, page, and anchor information you submit may be used by the service and potentially surfaced through partner discovery or exchange workflows.

Why it was flagged

The service participates in an external agent/partner discovery network, but the artifact does not describe participant identity checks, data-sharing boundaries, or how submitted site/link-slot information is exposed to partners.

Skill content
Agent-to-agent backlink exchange network ... GET | /registry | All verified sites ... GET | /v1/discover | Find matching partners
Recommendation

Only submit public, intended-for-sharing site data; review LinkSwarm's terms and require manual approval before any partner exchange is accepted or published.